Schneider Electric Netbotz 5 - 750/755 vulnerabilities

2 CVEs affecting Schneider Electric Netbotz 5 - 750/755, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13337, published 2026-09-01.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-13336, published 2026-09-01. High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days. CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system commands when a system…
• CVE-2026-13337, published 2026-09-01. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the…