ZDI-26-086
HIGH 7.8
Published
Feb 12, 2026
Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
Schneider
Schneider Electric's EcoStruxure Power Build contains a remote code execution vulnerability (CVE-2025-13845) that allows attackers to execute arbitrary code if a user visits a malicious webpage or opens a malicious file. This is a high-severity issue rated 7.8 on the CVSS scale that requires user interaction to exploit. Security teams should prioritize patching this vulnerability and educate users to avoid suspicious files and websites, particularly those related to power infrastructure management tools.