ZDI-26-094 HIGH 7.8 Published Feb 12, 2026

Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability

Schneider

CVE-2025-13845 is a remote code execution vulnerability affecting Schneider Electric EcoStruxure Power Build that allows attackers to execute arbitrary code if a user visits a malicious page or opens a malicious file, rated as HIGH severity with a CVSS score of 7.8. Security teams should prioritize patching this vulnerability and implement user awareness training to prevent users from accessing untrusted content, while monitoring for any exploitation attempts targeting this product.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy