ZDI-26-087
HIGH 7.8
Published
Feb 12, 2026
Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
Schneider
A high-severity remote code execution vulnerability (CVE-2025-13845) affects Schneider Electric EcoStruxure Power Build, allowing attackers to execute arbitrary code if users visit malicious pages or open malicious files. This represents a significant risk to industrial control environments where this software is deployed. Security teams should prioritize patching this vulnerability and implement user awareness training to prevent social engineering attacks that could deliver the malicious content needed for exploitation.