CVE-2025-5296: Schneider Electric Sesu

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent denial of service when a low-privileged attacker tampers with the installation folder.

Affected products

• Schneider Electric Sesu: before v3.0.12 (fixed in v3.0.12)

Published 2025-08-18. Last modified 2026-06-17.