ZDI-26-090 HIGH 7.8 Published Feb 12, 2026

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

Schneider

Schneider Electric EcoStruxure Power Build contains a remote code execution vulnerability (CVE-2025-13845) that allows attackers to execute arbitrary code on affected systems if a user visits a malicious page or opens a malicious file. The vulnerability carries a high CVSS score of 7.8 and poses significant risk to industrial control environments. Security teams should prioritize patching this application, implement web content filtering, and conduct user awareness training to prevent social engineering attacks that could trigger exploitation.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy