As cited
Copy frozen at (site build).
vulnerabilities
Schneider Electric NetBotz 5 750/755
Schneider Electric released a security advisory addressing two vulnerabilities in NetBotz 5 750/755 environmental and security monitoring devices: CVE-2026-13336, an OS command injection flaw exploitable through malicious backup files, and CVE-2026-13337, a Hibernate SQL injection vulnerability requiring authenticated access via the web interface. Version 5.6.0 resolves both issues and is available for download, with automatic restart upon installation.
Why it matters: Organizations deploying NetBotz 5 devices for facility monitoring should apply the patch immediately, as OS command injection could allow device manipulation and unauthorized data access over the local network without internet exposure.
- Source published
- First seen by Cybersecurity Tracker