HIGH CWE-611
CVE-2026-8045
Schneider Electric EcoStruxure™ IT Data Center Expert vulnerability
Schneider Electric·EcoStruxure™ IT Data Center Expert
7.1/ 10
CVSS 4.0
High severity
0.23%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 14% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jun 9, 2026
- Updated
- Jun 9, 2026
- First covered
- Jul 3, 2026
- Latest story
- 4 months ago
Summary
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints.
CWE-611Improper restriction of XML external entity reference
Attack profile
Attack vectorNetwork
ComplexityLow
RequirementsNone
PrivilegesLow
User interactionNone
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NAffected products
- Schneider Electric EcoStruxure™ IT Data Center Expertv9.1.1 and Prior