ZDI-26-087 HIGH 7.8 Published Feb 12, 2026

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

Schneider

A high-severity remote code execution vulnerability (CVE-2025-13845) affects Schneider Electric EcoStruxure Power Build, allowing attackers to execute arbitrary code if users visit malicious pages or open malicious files. This represents a significant risk to industrial control environments where this software is deployed. Security teams should prioritize patching this vulnerability and implement user awareness training to prevent social engineering attacks that could deliver the malicious content needed for exploitation.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy