CVE-2026-1226 — Schneider Electric / EcoStruxure Building Operation Workstation

CVE-2026-1226

Schneider Electric / EcoStruxure Building Operation Workstation PUBLISHED

Description (CNA)

CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted design content is processed through a TGML graphics file.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EcoStruxure Building Operation Workstation	affected All 7.0.x versions prior to 7.0.2
Schneider Electric / EcoStruxure Building Operation Webstation	affected All 6.0.x versions prior to 6.0.4.7000 (CP5)

CWE

CWE-94

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-041-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-02.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.