CVE-2026-8045

Name of the Vulnerable Software and Affected Versions Schneider Electric Data Center Expert (affected versions not specified)

Description An Improper Restriction of XML External Entity Reference (XXE) issue exists, which occurs when an application fails to restrict XML external entity references, potentially allowing the disclosure of internal server files. An attacker with a Data Center Expert user account can exploit this by submitting crafted XML payloads to SOAP service endpoints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.