CVE Program partner

schneider

Schneider Electric

API
CVEs, 365 days45750 all time, 11 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationSchneider Electric
RoleCNA
TypeVendor
Reports tomitre
ScopeProducts supported by Schneider Electric and its affiliates, including products branded Schneider Electric or any other brands owned or controlled by Schneider Electric (such as but not limited to APC, Eliwell, Proface, ProLeit, Lauritz Knudsen Electrical & Automation, etc.), excluding Aveva and RIB products.
Advisorieshttps://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp

Latest CVEs · RSS

  • CVE-2026-102250 2026-10-13 · CVSS 8.6
    CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user beg
  • CVE-2026-3869 2026-09-11 · CVSS 9.2
    CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the
  • CVE-2026-81861 2026-09-11 · CVSS 5.9
    CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functiona
  • CVE-2026-77120 2026-09-09 · CVSS 8.7
    CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to
  • CVE-2026-19233 2026-09-09 · CVSS 8.6
    CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker
  • CVE-2026-8044 2026-09-09 · CVSS 8.6
    CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an att
  • CVE-2026-13348 2026-09-01 · CVSS 6.9
    CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user accou
  • CVE-2026-13337 2026-09-01 · CVSS 5.1
    CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is
  • CVE-2026-13336 2026-09-01 · CVSS 7.3
    CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Oper
  • CVE-2024-10085 2026-09-01 · CVSS 8.2
    CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when
  • CVE-2026-12927 2026-07-29 · CVSS 8.4
    CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is importe
  • CVE-2026-0667 2026-07-29 · CVSS 9.3
    CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentia
  • CVE-2026-14354 2026-07-29 · CVSS 8.7
    CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially l
  • CVE-2026-9718 2026-06-25 · CVSS 6.9
    CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availabil
  • CVE-2026-9717 2026-06-25 · CVSS 8.6
    CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of command
  • CVE-2026-9716 2026-06-25 · CVSS 8.7
    CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality
  • CVE-2026-9651 2026-06-25 · CVSS 6.7
    CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account co
  • CVE-2026-9650 2026-06-25 · CVSS 8.7
    CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attac
  • CVE-2026-8045 2026-06-09 · CVSS 7.1
    CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an
  • CVE-2026-6332 2026-05-14 · CVSS 6.8
    CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revea
  • CVE-2026-6866 2026-05-12 · CVSS 8.2
    CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when crede
  • CVE-2026-6865 2026-05-12 · CVSS 7.1
    CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files whe
  • CVE-2026-4827 2026-05-12 · CVSS 8.7
    CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑mana
  • CVE-2026-2401 2026-04-14 · CVSS 2.4
    CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user exe
  • CVE-2026-2400 2026-04-14 · CVSS 5.3
    CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Adm

All CVE Program partners