CVE-2026-8045
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints.
- Score
- CVSS 4.0 7.1 High
- Status
- Analyzed - cybersecurity@se.com
- Published
- 2026-06-09
- Last modified
- 2026-06-09
- Weaknesses
- CWE-611
Affected products
- Struxureware Data Center Expert (Schneider-electric)
- Ecostruxure It Data Center Expert (Schneider Electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-01&p_enDocType=Security+and+Safety+Notice&p_File_…
