CVE-2018-7841 CISA KEV · Actively exploited
Schneider Electric U.motion Builder SQL Injection Vulnerability
CVSS score
—
EPSS probability
%72.7
Risk score
—
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Schneider Electric U.Motion Builder 1.3.4 - 'track_import_export.php object_id' Unauthenticated Command Injection
Makefile Go / Python
Nuclei: Schneider Electric U.motion Builder - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
7.2
CVE-2026-9717OS command injection in Schneider Electric Powerlogic P7 Firmware
Patch status unknownEPSS %2
8.7
8.6
9.2
CVE-2026-3869Vulnerability in Schneider Electric Modicon M580
Patch status unknown Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2018-7841"