PT-2026-47813 · Schneider Electric · Ecostruxure Data Center Expert

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-8045

Mitre

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2026-8045

Affected Products

Ecostruxure Data Center Expert

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-8045 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-01.pdf · Note