CVE-2026-1286

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file.

Score

CVSS 4.0 7.0 High

Status

Analyzed - cybersecurity@se.com

Published

2026-03-10

Last modified

2026-03-10

Weaknesses

CWE-502

Affected products

• Ecostruxure Foxboro Dcs Control Software (Schneider-electric)
• Ecostruxure Foxboro Dcs (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-069-03&p_enDocType=Security+and+Safety+Notice&p_File_…