CVE-2026-13337: Schneider Electric Netbotz 5 - 750/755

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the web-service interface or webui.

Affected products

• Schneider Electric Netbotz 5 - 750/755: up to and including 5.5.2

Published 2026-09-01. Last modified 2026-09-01.