Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Risk score

52.0

Published

2026-06-09

Status

Analyzed

CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints.

Weaknesses

CWE-611

Coverage 1

vulnerability

Schneider Electric EcoStruxure IT Data Center Expert

This report details a vulnerability discovered in Schneider Electric’s EcoStruxure IT Data Center Expert software, specifically versions up to 9.1.1. The vulnerability, classified as CWE-611, is an Improper Restriction o…

CISA Advisories · Jun 30, 2026 Medium

CVE-2026-8045FRxmlcwe-611data center

All articles mentioning it

Advisories and references

• download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-01&p_e...