ZDI-26-093 HIGH 7.8 Published Feb 12, 2026

Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability

Schneider

CVE-2025-13845 is a high-severity remote code execution vulnerability in Schneider Electric EcoStruxure Power Build that allows attackers to execute arbitrary code on affected systems. The exploitation requires user interaction, such as tricking a target into visiting a malicious webpage or opening a malicious file. Security teams should prioritize patching this application and implementing user awareness training to prevent social engineering attacks that could trigger exploitation.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy