SecAlerts
Schneider Electric logo

Schneider Electric

Security Risk Profile

62
/100
high

Security Risk Score

Comprehensive risk assessment based on 191 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 28, 2014 to present

191
Total CVEs
76
Critical+High
3
Exploited
63
Unpatched

Threat Assessment

Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
63
Critical/High
Risk Level
62/100
high
⚠️ 3 Active Exploits 1 Zero-Days🆕 47Fresh (<7d)📈 47 in Last 30 Days

Severity Distribution

Critical
17
High
59
Medium
10
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
Buffer Overflow
10
2
Path Traversal
6
3
Malicious File Upload
2
4
Use After Free
2
5
Input Validation
1

Most Affected Products

1. Schneider Electric IGSS61
2. Schneider Electric EcoStruxure Power Build27
3. Schneider Electric APC Easy UPS Online18
4. Schneider Electric C-Bus Toolkit16
5. Schneider Electric EcoStruxure Power Monitoring Expert12

Recent Vulnerabilities

See more →
CVE-2026-6332
CVSS 6.8medium

Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC

5/14/2026🔧 No Patch
CVE-2026-6866
CVSS 8.2EPSS 0%high

Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server

5/12/2026🔧 No Patch
ZDI-26-212
unknown

Schneider Electric EcoStruxure Data Center Expert Hard-coded Password Remote Code Execution Vulnerability

3/16/2026🔧 No Patch
ZDI-CAN-28034
unknown

ZDI-26-212: Schneider Electric EcoStruxure Data Center Expert Hard-coded Password Remote Code Execution Vulnerability

3/16/2026🔧 No Patch
ZDI-26-090
unknown

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

2/12/2026🔧 No Patch
ZDI-26-088
unknown

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

2/12/2026🔧 No Patch
ZDI-CAN-27362
unknown

ZDI-26-091: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

2/12/2026🔧 No Patch
ZDI-26-091
unknown

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

2/12/2026🔧 No Patch
ZDI-CAN-27390
unknown

ZDI-26-088: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

2/12/2026🔧 No Patch
ZDI-CAN-27364
unknown

ZDI-26-090: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

2/12/2026🔧 No Patch

Monitor Schneider Electric in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.