CVE-2026-8045 — Schneider Electric / EcoStruxure™ IT Data Center Expert

CVE-2026-8045

Schneider Electric / EcoStruxure™ IT Data Center Expert PUBLISHED

Description (CNA)

CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure™ IT Data Center Expert	affected v9.1.1 and Prior

CWE

CWE-611

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.