For awareness Medium Patch in your normal cycle CVSS 5.3
Memory flaw in Schneider Electric switchboard design software
Schneider Electric CPCERTSchneider Electric, EcoStruxure Power Build Rapsody · energyCVE-2026-119055
What happened. Schneider Electric reports a use-after-free flaw in EcoStruxure Power Build Rapsody, software for entering single line diagrams and listing switchboard parts. Local attackers could potentially run arbitrary code. CVE-2026-119055, base score 5.3.
Who is affected. Users of Schneider Electric EcoStruxure Power Build Rapsody software. The report gives no version numbers and names no sector.
What to do. Apply the remediations in the Schneider Electric advisory for EcoStruxure Power Build Rapsody. Check where the software is installed and who has local access to those machines.
When to act. For awareness: Power engineering users: the flaw is local and rated 5.3, so schedule the fix with routine maintenance.
Editor's reading
Forasset ownerIT security
- Purdue level
- L4
- L2
Why: The software is a design and bill-of-materials tool run on engineering or office workstations, so it most likely sits in enterprise IT (L4) or engineering (L2); the report gives no level.
- Are you exposed?
Search the asset inventory for EcoStruxure Power Build Rapsody installations and compare them with the versions in the Schneider Electric advisory.
- If you cannot fix it yet
- Restrict local and remote logon to machines running the software to named engineers.
- Open only project and diagram files from trusted sources until the fix is applied.
- Watch for
- Unexpected crashes or new processes started by the Rapsody application on engineering or design workstations.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Schneider Electric CPCERT (opens download.schneider-electric.com)