CVE-2018-7817: Schneider Electric Zelio Soft 2

High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days.

A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file.

Affected products

• Schneider Electric Zelio Soft 2: up to and including 5.1

Published 2019-02-06. Last modified 2026-06-17.