Skip to content
OpenAdvisories
High SEVD-2026-069-04 1 CVE

Improper Control of Generation of Code ('Code Injection') vulnerability on EcoStruxure™ Automation Expert

Published Mar 10, 2026 · Updated Mar 10, 2026

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Automation Expert product.
The EcoStruxure™ Automation Expert product is plant automation software designed for digital control systems
in discrete, hybrid and continuous industrial processes. A totally integrated automation solution designed to
enhance your flexibility, efficiency and scalability.
Failure to apply the remediation provided below may risk execution of arbitrary commands on the engineering
workstation, which could result in a potential compromise of full system.

Vulnerabilities 1

Revision history

  1. #1.0.0

    Original Release

References