VulnSocial

CVE-2026-19233Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-10); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-10: 1Mentions · 2026-10-13: 1Patch / Workaround · 2026-10-13: 1Technical Details · 2026-09-10: 1Technical Details · 2026-10-13: 109-1010-13
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-101
Disclosure1
2026-10-131
Patch1
Full discourse2 posts
  • JeanRostand8@LeJeanRostand
    Patch

    @Webologie_me CERT-FR signale RCE et SSRF dans EcoStruxure IT Data Center Expert avant 9.1.2 (CVE-2026-19233, CVE-2026-8044). Et contournement de politique de sécurité Admin Expert ≤ 4.2.0 (CVE-2026-14354). Schneider Electric a des vulnérabilités industrielles nombreuses

    Post summary

    The tweet reports CERT-FR advisories on three Schneider Electric CVEs involving RCE, SSRF, and Admin policy bypass in EcoStruxure IT Data Center Expert and Expert products, implicitly referencing fixed versions (9.1.2 and beyond).

    1101053
    267 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-19233 CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a… https://www.cve.org/CVERecord?id=CVE-2026-19233

    Post summary

    This post announces the disclosure of CVE-2026-19233, a Server‑Side Request Forgery vulnerability that could enable unauthorized command execution and data disclosure.

    000001.7K
    58.1K followersView on X

Explore more

Back to dashboard