ZDI-26-093
HIGH 7.8
Published
Feb 12, 2026
Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability
Schneider
CVE-2025-13845 is a high-severity remote code execution vulnerability in Schneider Electric EcoStruxure Power Build that allows attackers to execute arbitrary code on affected systems. The exploitation requires user interaction, such as tricking a target into visiting a malicious webpage or opening a malicious file. Security teams should prioritize patching this application and implementing user awareness training to prevent social engineering attacks that could trigger exploitation.