Use After Free Vulnerability in Schneider Electric Products
CVE-2026-119055

4.6MEDIUM

Key Information:

Vendor

Schneider Electric
Status
Ecostruxure™ Power Build Rapsody
Vendor
CVE Published:
11 November 2026

What is CVE-2026-119055?

A Use After Free vulnerability has been identified in Schneider Electric products, allowing a local attacker to potentially execute arbitrary code. This occurs when an end user is tricked into opening a specifically crafted malicious SSD file. The exploitation of this vulnerability could lead to unauthorized access and manipulation of the affected system, posing significant security risks.

Affected Version(s)

EcoStruxure™ Power Build Rapsody FR-V2.9.1.0 and prior

EcoStruxure™ Power Build Rapsody ESP-V2.8.5.0301 and prior

EcoStruxure™ Power Build Rapsody PT-V2.8.7.0101 and prior

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...

CVSS V4

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.