ZDI-26-092
HIGH 7.8
Published
Feb 12, 2026
Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
Schneider
A remote code execution vulnerability (CVE-2025-13845) has been discovered in Schneider Electric EcoStruxure Power Build with a CVSS score of 7.8, requiring users to interact with malicious content such as a webpage or file to trigger the exploit. An attacker can execute arbitrary code on vulnerable systems by tricking users into visiting compromised sites or opening malicious files. Security teams should prioritize patching this product and educate users to avoid suspicious links and attachments until updates are available.