medium6.5
CVE-2026-8045
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an…
Impact
CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Struxureware Data Center Expert | before 9.1.2 |