OPS INTEL

CRITICAL 95% confidence cve

SolarWinds Patches Critical Serv-U Flaws

SolarWinds addresses four critical security flaws in Serv-U file transfer software with updates. These vulnerabilities could lead to remote code execution if.

['Remote Code Execution (RCE) possible through vulnerabilities', 'High severity due to CVSS scores of 9.1']

SolarWinds Serv-U users

action items (2)

• Update to patched version of Serv-U immediately
• Review network configurations for potential exposure

The Hacker News · 2026-02-25T11:36

HIGH 95% confidence cve

ZDI-26-087: Schneider Electric EcoStruxure Power Build Vulnerability

Schneider Electric's EcoStruxure Power Build SSD file parsing flaw allows remote code execution. CVSS rating of 7.8, impacting systems requiring user. Read full

['Remote attackers can exploit the vulnerability for RCE through malicious files or webpages', 'Requires user interaction to execute']

Industrial Control Systems (ICS)Manufacturing & Engineering

action items (2)

• Update to the latest version of EcoStruxure Power Build as soon as possible
• Implement strict security policies around file handling

Zero Day Initiative · 2026-02-24T23:55

HIGH 95% confidence cve

ZDI-26-086: Schneider Electric EcoStruxure Power Build Vulnerability

Schneider Electric EcoStruxure Power Build suffers from a memory corruption issue enabling remote code execution. CVSS rating is 7.8. Includes severity, confide

['Remote Code Execution via file manipulation', 'High severity due to potential impact on critical infrastructure']

Industrial Control SystemsPower Management Software

action items (2)

• Update to the latest security release
• Monitor for suspicious activity

Zero Day Initiative · 2026-02-24T23:55

HIGH 95% confidence cve

ZDI-26-085: Schneider Electric EcoStruxure Power Build Vulnerability

Schneider Electric EcoStruxure Power Build suffers from a memory corruption flaw enabling remote code execution. Requires user interaction, rated CVSS 7.8.

['User interaction needed for exploitation', 'CVSS rating indicates high severity']

Industrial control systemsEnergy management solutions

action items (2)

• Apply patches immediately
• Monitor for unusual activity

Zero Day Initiative · 2026-02-24T23:55

HIGH 95% confidence cve

Schneider Electric EcoStruxure Power Build Memory Corruption RCE Vulnerability

A critical memory corruption flaw in Schneider Electric EcoStruxure Power Build allows remote attackers to execute arbitrary code via malicious files or web.

['Improper handling of files can lead to remote code execution', 'User interaction is required for exploitation']

Industrial Control Systems (ICS)Power UtilitiesEnergy Sector

action items (3)

• Apply available patches immediately
• Review and restrict file access permissions
• Conduct an audit of existing systems using affected software

Zero Day Initiative · 2026-02-24T23:55