Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-1226

CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted desig

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted design content is processed through a TGML graphics file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure Building Operation Workstation

Default version status: unaffected

  • All 7.0.x versions prior to 7.0.2affected

Schneider Electric EcoStruxure Building Operation Webstation

Default version status: unaffected

  • All 6.0.x versions prior to 6.0.4.7000 (CP5)affected

References