Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-1227

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or d

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or denial of service conditions when a local user uploads a specially crafted TGML graphics file to the EBO server from Workstation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure Building Operation Workstation

Default version status: unaffected

  • All 7.0.x versions prior to 7.0.3.2000 (CP1)affected

Schneider Electric EcoStruxure Building Operation Webstation

Default version status: unaffected

  • All 6.x versions prior to 6.0.4.14001 (CP10)affected

References