Skip to content
OpenAdvisories
High · 8.6 CVE-2026-19233 EUVD-2026-75105GHSA-cwfj-57h7-4xqm

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server d…

Published Sep 9, 2026 · Updated Sep 9, 2026 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Category: ICS / OT

Description

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) Versions 9.1.2 and prior —

Advisories 1

References