security_identifier

CVE-2026-13336

The lower-numbered of the two 2026 CVE records opened against Schneider Electric NetBotz 5 750 and 755 firmware at version 5.5.2 and earlier. Its disclosing advisory covers an OS command injection and a Hibernate SQL injection without saying which one this identifier names.

Current clusters

security1 publisher

Restoring a tampered NetBotz backup runs Linux commands on Schneider's data center monitor

Schneider Electric's NetBotz 5 750 and 755 environmental monitors execute operating system commands from a maliciously modified backup file, and firmware 5.6.0 closes that hole along with an authenticated SQL injection.

Publishers:cisa.gov

Reality

Evidence68
Adoption20
Hype gap+15
Incentives60
Confidence65