Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-8044 1 Schneider-electric 1 Ecostruxure It Data Center Expert 2026-09-10 N/A
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters.
CVE-2026-19233 1 Schneider-electric 1 Ecostruxure It Data Center Expert 2026-09-10 N/A
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint.