CVE-2026-14354

Last refreshed2026-10-06

Status: UPDATED | Advisory ID: CVE-2026-14354

Key Details

CVE	CVE-2026-14354
CVSS Score / Version	8.7 (High) / CVSS v4.0
Updated	2026-07-30
Affected products	Schneider Electric EcoStruxure™ Cybersecurity Admin Expert
Classified as	CWE-522 (Insufficiently Protected Credentials)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Schneider Electric	EcoStruxure™ Cybersecurity Admin Expert

Vendor

Product

Affected Versions

Patch Status

Schneider Electric

EcoStruxure™ Cybersecurity Admin Expert

Subsystems	General OT
Sectors	Multiple

What to Know

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored credentials within the application.

What to Do

Monitor Schneider Electric's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-14354
CVE	https://www.cve.org/CVERecord?id=CVE-2026-14354

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-14354

CVE