https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:14:06.681411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-54924 CVE-2025-54924 2026-10-07T10:14:06.703899+00:00

Affected: Schneider Electric EcoStruxure™ Power Monitoring Expert (PME), Schneider Electric EcoStruxure™ Power Operation (EPO) Advanced Reporting and Dashboards Module

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulnerable endpoint.

 https://cve.radiocsirt.org/vuln/icsa-25-224-03 ICSA-25-224-03 — Schneider Electric EcoStruxure Power Monitoring Expert 2026-10-07T10:14:06.703967+00:00

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Monitoring Expert (PME) and EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) products. EcoStruxure Power Monitoring Expert (PME) is an on-premises software used to help power critical and energy-intensive facilities maximize uptime and operational efficiency. Note: There are some instances of PME being deployed in a Managed Service model. EcoStruxure Power Operation (EPO) and EcoStruxure Power SCADA Operation (PSO) are on-premises software offers that provides a single platform to monitor and control medium and lower power systems. Failure to apply the remediation and/or mitigations provided below may risk deserialization of untrusted data, server-side request forgery and/or path traversal that could result in remote code execution, and/or unauthorized access to sensitive data.