Schneider-electric vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Schneider-electric flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2018-7841 Schneider Electric U.motion Builder SQL InjectionExploited since Apr 15, 2022 · CVSS 9.8

Latest high and critical flaws

• CVE-2026-102250 CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begHigh 8.6 · Oct 13, 2026
• CVE-2026-3869 CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the Critical 9.2 · Sep 11, 2026
• CVE-2026-8044 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attHigh 8.6 · Sep 9, 2026
• CVE-2026-77120 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation toHigh 8.7 · Sep 9, 2026
• CVE-2026-19233 CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker High 8.6 · Sep 9, 2026
• CVE-2026-13336 CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux OperHigh 7.3 · Sep 1, 2026
• CVE-2024-10085 CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when High 8.2 · Sep 1, 2026
• CVE-2026-14354 CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially lHigh 8.7 · Jul 29, 2026
• CVE-2026-12927 CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is importeHigh 8.4 · Jul 29, 2026
• CVE-2026-0667 CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiaCritical 9.3 · Jul 29, 2026
• CVE-2026-9717 CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commandHigh 8.6 · Jun 25, 2026
• CVE-2026-9716 CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionalityHigh 8.7 · Jun 25, 2026
• CVE-2026-9650 CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacHigh 8.7 · Jun 25, 2026
• CVE-2026-8045 CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an High 7.1 · Jun 9, 2026
• CVE-2026-6866 CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credeHigh 8.2 · May 12, 2026
• CVE-2026-6865 CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files wheHigh 7.1 · May 12, 2026
• CVE-2026-4827 CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑manaHigh 8.7 · May 12, 2026
• CVE-2026-2273 CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstHigh 7.2 · Mar 10, 2026
• CVE-2026-1286 CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on worHigh 7 · Mar 10, 2026
• CVE-2025-13957 CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and aHigh 7.5 · Mar 10, 2026
• CVE-2025-11739 CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authentiHigh 8.5 · Mar 10, 2026
• CVE-2026-1227 CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within High 7 · Feb 11, 2026
• CVE-2026-1226 CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when malicHigh 7 · Feb 11, 2026
• CVE-2025-13905 CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable servicHigh 7 · Jan 29, 2026
• CVE-2025-13845 CWE-416: Use After Free vulnerability that could cause remote code execution when the end user imports the malicious project file (SSD file) into Rapsody.High 8.4 · Jan 15, 2026