Ecostruxure It Data Center Expert CVEs and Security Vulnerabilities

CVE-2026-8044

Remote Code Execution via Argument Injection in Backup Configuration Parameters

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Schneider-electric

Products

Ecostruxure It Data Center Expert

CVE-2026-19233

SSRF Vulnerability Allowing Unauthorized Command Execution in Schneider Electric EcoStruxure IT Data Center Expert

CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint.