Is CVE-2026-6332 actively exploited?

No active exploitation of CVE-2026-6332 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-6332 be exploited remotely?

No. CVE-2026-6332 requires local access to exploit.

What is the CVSS score of CVE-2026-6332?

CVE-2026-6332 has a CVSS score of 6.8 (MEDIUM).

HOME VULNERABILITIESCVE-2026-6332

MEDIUM

CVE-2026-6332

CWE-312Published: May 14, 2026· Updated: May 14, 2026

6.8

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.6th

Official Description

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.

NVD Source

Technical Analysis

CVE-2026-6332 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

News & Research Mentioning CVE-2026-6332

Schneider Electric EcoStruxure Machine Expert HVAC

CISA Alerts· May 20, 2026

View CSAF Summary Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality. The following versions of Schneider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01) are affected: Ecostruxure™ Machine Expert HVAC vers<1.10.0 CVSS Vendor Equipment Vulnerabilities v3 5.5 Schneider Electric Schneider Electric EcoStruxure Machine Expert HVAC (SEVD-2026- [xlite_meta score:53 src:CISA Alerts xlite_fp:614608fbcb25c942d70f6ca2aa0fe7896aa79ead16479ca7f0a61de820e78370]