EcoStruxure IT Data Center Expert Code Execution

The vulnerability of the software for managing the infrastructure of EcoStruxure IT Data Center Expert is related to the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EcoStruxure IT Data Center Expert Command Execution

The vulnerability of the software for managing the infrastructure of EcoStruxure IT Data Center Expert is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

EcoStruxure IT Data Center Expert < 9.1.2 Multiple Vulnerabilities (SEVD-2026-251-01)

The version of EcoStruxure IT Data Center Expert installed on the remote host is prior to 9.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SEVD-2026-251-01 advisory. - CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized...

Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials. This plugin only...

Schneider Electric Cybersecurity Admin Expert Privilege Escalation

The vulnerability of Schneider Electric’s Security Management Software, EcoStruxure Cybersecurity Admin Expert CAE, is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-60889

Name of the Vulnerable Software and Affected Versions Schneider Electric EcoStruxure Cybersecurity Admin Expert affected versions not specified Description Insufficient protection of stored credentials within the application allows a local privileged attacker to bypass authentication and perform...

EcoStruxure IT Data Center Expert XML External Object Disclosure

The vulnerability of the EcoStruxure IT Data Center Expert software for managing data center infrastructure is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Ecostruxure Machine Expert HVAC Info Disclosure

The vulnerability of the microprogramming software used in Ecostruxure Machine Expert HVAC programmable logic controllers is related to the storage of confidential information in an open manner. Exploiting this vulnerability could allow a intruder to disclose the protected information...

CVE-2026-6332 Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it...

CVE-2026-6332 Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it...

CVE-2026-6332

CVE-2026-6332 describes a plaintext storage of sensitive information vulnerability in Schneider Electric’s EcoStruxure Machine Expert HVAC platform. The issue centers on how sensitive data (potentially including protected source code) is stored, which could lead to confidentiality loss if an auth...

Schneider Electric Ecostruxure Machine Expert HVAC security vulnerabilities

Schneider Electric Ecostruxure Machine Expert HVAC is a software platform developed by Schneider Electric, a French company, dedicated to the control and automation of heating, ventilation, and air conditioning equipment. Schneider Electric Ecostruxure Machine Expert HVAC has a security...

CVE-2026-6866 Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials...

CVE-2026-6866 Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials...

CVE-2026-6866

CVE-2026-6866 affects EcoStruxure Panel Server and describes a CWE-1188 vulnerability where initialization of a resource with an insecure default could enable unauthorized authentication when credentials revert to initial settings. The threat scenario implies potential unauthorized disclosure of ...

Schneider Electric EcoStruxure Panel Server security vulnerabilities

Schneider Electric EcoStruxure Panel Server is an IoT gateway developed by Schneider Electric of France, used for data collection and uploading. Schneider Electric EcoStruxure Panel Server has a security vulnerability that stems from the use of insecure default values during resource...

Schneider Electric’s various products have issues with security features.

Schneider Electric Easergy MiCOM Px40 Series are products of Schneider Electric, a French company. The Schneider Electric Easergy MiCOM Px40 Series consists of a series of power protection and control relay devices. The Schneider Electric Easergy MiCOM C264 is an industrial communication gateway...

EcoStruxure Power Monitoring Expert Code Execution

The vulnerability of the EcoStruxure Power Monitoring Expert software is related to deficiencies in its deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

EcoStruxure Foxboro DCS Deserialization Code Execution

The vulnerability of the microprogrammed software in the distributed control system EcoStruxure Foxboro DCS is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

EcoStruxure Automation Expert Arbitrary Command Execution

The vulnerability of the EcoStruxure Automation Expert software for automating manufacturing processes is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain full control over the system...