Is CVE-2026-14354 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-14354 being exploited in the wild.

How severe is CVE-2026-14354?

Informational severity, with a CVSS score of 8.7, published 29 July 2026.

Is there a fix for CVE-2026-14354?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-14354 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-14354?

Check whether you run Schneider Electric EcoStruxure Cybersecurity Admin Expert. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-14354: Schneider Electric EcoStruxure Cybersecurity Admin Expert credential protection bypass

CVE-2026-14354 · Severity: info · CVSS 8.7 · Published 2026-07-29

Schneider Electric EcoStruxure™ Cybersecurity Admin Expert, a tool used to manage security settings across industrial devices, contains a vulnerability in how it stores and protects sensitive credentials. A local attacker with high-level system privileges could exploit this weakness to bypass authentication or modify credentials. This could lead to a total loss of control over the managed industrial devices, potentially impacting operational safety and availability.

Vendors: Schneider Electric.

Quick answers

Is CVE-2026-14354 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-14354 being exploited in the wild.
How severe is CVE-2026-14354?: Informational severity, with a CVSS score of 8.7, published 29 July 2026.
Which products and versions are affected?: Schneider Electric EcoStruxure™ Cybersecurity Admin Expert v4.2.0 and prior.
Is there a fix for CVE-2026-14354?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-14354 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-14354?: Check whether you run Schneider Electric EcoStruxure Cybersecurity Admin Expert. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A CWE-522 (Insufficiently Protected Credentials) vulnerability exists in Schneider Electric EcoStruxure™ Cybersecurity Admin Expert v4.2.0 and prior. The flaw stems from weaknesses in the handling and protection of stored credentials within the application database or configuration files. A local attacker who already possesses high privileges on the host system can leverage these weaknesses to bypass authentication mechanisms or perform unauthorized credential modifications. Successful exploitation grants the attacker the ability to compromise devices managed by the software. The vulnerability is tracked under Schneider Electric advisory SEVD-2026-195-02.

Affected products

Schneider Electric EcoStruxure™ Cybersecurity Admin Expert v4.2.0 and prior

Timeline

2026-07-29: disclosed: Initial disclosure by Schneider Electric
2026-07-29: advisory: NVD publication date

References

https://download.se.com/files?p_Doc_Ref=SEVD-2026-195-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-195-02.pdf

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.