CVE-2021-22796: Schneider Electric C-Gate Server

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is uploaded. Affected Product: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)

Affected products

• Schneider Electric C-Gate Server: up to and including 2.11.7

Published 2022-02-11. Last modified 2026-06-17.