RCE in Schneider Electric Ecostruxure™ Automation Expert

CVE-2026-2273

CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a poten…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.000 (10.6th percentile) — read the EPSS interpretation.