CVE Tools
Track your stack

Schneider-electric

539 CVEs tracked since 2011. Since Jan 2012, 3 of them reached CISA KEV.

Schneider-electric CVEs per month

Jan 2012 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Schneider-electric CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2012-0130
2012-020
2012-030
2012-040
2012-050
2012-060
2012-070
2012-081 or fewer
2012-091 or fewer
2012-101 or fewer
2012-111 or fewer
2012-120
2013-010
2013-020
2013-030
2013-0440
2013-050
2013-060
2013-070
2013-0810
2013-090
2013-100
2013-110
2013-120
2014-011 or fewer
2014-0230
2014-0320
2014-041 or fewer
2014-051 or fewer
2014-061 or fewer
2014-071 or fewer
2014-0850
2014-0940
2014-101 or fewer
2014-111 or fewer
2014-1240
2015-0130
2015-0210
2015-030
2015-040
2015-050
2015-061 or fewer
2015-070
2015-080
2015-090
2015-100
2015-110
2015-1210
2016-010
2016-020
2016-030
2016-040
2016-050
2016-060
2016-070
2016-08no snapshot
2016-090
2016-100
2016-11no snapshot
2016-120
2017-01no snapshot
2017-021 or fewer
2017-031 or fewer
2017-04no snapshot
2017-051 or fewer
2017-06no snapshot
2017-0730
2017-082 or fewer
2017-0970
2017-101 or fewer
2017-11no snapshot
2017-121 or fewer
2018-012 or fewer
2018-021 or fewer
2018-032 or fewer
2018-04no snapshot
2018-05no snapshot
2018-062 or fewer
2018-0730
2018-0850
2018-092 or fewer
2018-102 or fewer
2018-11no snapshot
2018-12120
2019-01no snapshot
2019-0250
2019-03no snapshot
2019-04no snapshot
2019-05421
2019-06no snapshot
2019-0750
2019-082 or fewer
2019-0990
2019-10100
2019-1130
2019-122 or fewer
2020-012 or fewer
2020-022 or fewer
2020-0350
2020-04no snapshot
2020-05no snapshot
2020-06170
2020-07no snapshot
2020-0850
2020-091 or fewer
2020-101 or fewer
2020-11230
2020-12140
2021-0130
2021-022 or fewer
2021-03no snapshot
2021-0450
2021-05120
2021-062 or fewer
2021-07160
2021-08190
2021-0940
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-0160
2022-02260
2022-03160
2022-0470
2022-053 or fewer
2022-06100
2022-07120
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-1180
2022-123 or fewer
2023-01280
2023-0290
2023-03no snapshot
2023-04240
2023-05170
2023-0640
2023-0760
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-1150
2023-124 or fewer
2024-014 or fewer
2024-0240
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-06130
2024-0760
2024-084 or fewer
2024-093 or fewer
2024-1080
2024-1170
2024-123 or fewer
2025-0190
2025-0290
2025-035 or fewer
2025-0461
2025-054 or fewer
2025-06100
2025-0770
2025-08100
2025-094 or fewer
2025-1051
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-0480
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Schneider-electric's monthly top three, with their CVEs summed over those months.

  1. Modicon Quantum232 months
  2. Modicon Quantum Safety Controller222 months
  3. Plc Simulator222 months
  4. Ecostruxure Control Expert204 months
  5. Interactive Graphical Scada System183 months
  6. Hmiscu151 month
  7. Modicon LMC058151 month
  8. Modicon M262151 month
  9. Modicon M340155 months
  10. Ecostruxure Process Expert132 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Schneider-electric.

  1. CVE-2026-102250CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which...—
  2. CVE-2026-3869CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project w...—
  3. CVE-2026-81861CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.6.5
  4. CVE-2026-77120CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthorized execution of a...—
  5. CVE-2026-19233CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends craft...—
  6. CVE-2026-8044CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when ...—
  7. CVE-2026-13348CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number ...5.3
  8. CVE-2026-13337CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the web-s...6.4
  9. CVE-2026-13336CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system commands when a system b...6.4
  10. CVE-2024-10085CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA reques...7.5
  11. CVE-2026-12927CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.7.8
  12. CVE-2026-0667CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating o...9.8
  13. CVE-2026-14354CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devic...—
  14. CVE-2026-9718CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availability when a specially crafted request ...6.5
  15. CVE-2026-9717CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting...7.2

The record

Peak rank
#6 in May 2019
Busiest month shown
May 2019, 42 CVEs
Months with a KEV entry
3 since Jan 2012
Monthly snapshots
61 since 2011
Schneider-electric's full record, month by month