Vulnerability in Schneider Electric Ecostruxure™ It Data Center Expert (Formerly Known As Struxureware Expert)
CVE-2026-8044
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters.
Affected products
- Schneider Electric Ecostruxure™ It Data Center Expert (Formerly Known As Struxureware Expert) — versions Versions 9.1.2 and prior