https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:24:20.466896+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13905 CVE-2025-13905 2026-10-07T11:24:20.486793+00:00

Affected: Schneider Electric EcoStruxure™ Process Expert, Schneider Electric EcoStruxure™ Process Expert for AVEVA System Platform

CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service restart.

 https://cve.radiocsirt.org/vuln/sevd-2026-013-02 SEVD-2026-013-02 — Incorrect Default Permissions Vulnerability on EcoStruxure™ Process Expert 2026-10-07T11:24:20.486935+00:00

Schneider Electric is aware of a vulnerability in its EcoStruxureTM Process and EcoStruxure™ Process Expert for AVEVA System Platform products. The EcoStruxureTM Process is a single automation system to engineer, operate, and maintain your entire infrastructure for a sustainable, productive and market-agile plant. The EcoStruxure™ Process Expert for AVEVA System Platform product enables users to achieve operational profitability from design engineering to meeting the demands of modern-day production. It provides an asset centric and object-oriented automation platform to deploy system-wide standards in a digital ecosystem. Failure to apply the Fix/Mitigations provided below may risk modification of the executable binaries, which could result in privilege escalation.