Schneider ELectric EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)

• CVE-2026-19233 High 8.6 CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, 0.6%
• CVE-2026-8044 High 8.6 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when mal 0.7%
• CVE-2025-13957 High 7.5 CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL 0.7%