CVE-2026-13336

Last refreshed2026-10-06

Status: UPDATED | Advisory ID: CVE-2026-13336

Key Details

CVE	CVE-2026-13336
CVSS Score / Version	7.3 (High) / CVSS v4.0
Updated	2026-09-01
Affected products	Schneider Electric NetBotz 5 - 750/755
Classified as	CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Schneider Electric	NetBotz 5 - 750/755

Vendor

Product

Affected Versions

Patch Status

Schneider Electric

NetBotz 5 - 750/755

Subsystems	General OT
Sectors	Multiple

What to Know

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified.

What to Do

Monitor Schneider Electric's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-13336
CVE	https://www.cve.org/CVERecord?id=CVE-2026-13336

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-13336

CVE