7.0 High

CVE-2026-1227 CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized…

Description

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or denial of service conditions when a local user uploads a specially crafted TGML graphics file to the EBO server from Workstation.

Affected products and versions

Product	Affected versions	Fixed in
EcoStruxure Building Operation Workstation	Versions not published
EcoStruxure Building Operation Webstation	Versions not published

The 2 CVEs of EcoStruxure Building Operation Workstation →

CVE-2026-1226 CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or… 7.0 High

Do you use EcoStruxure Building Operation Workstation?

Track this CVE Watch EcoStruxure Building Operation Workstation Check my SBOMs

www.cveye.io/en/cve/CVE-2026-1227

Timeline

Published February 11, 2026
Last modified February 11, 2026

References

download.schneider-electric.com download.schneider-electric.com

Track this CVE

CVE-2026-1227 CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized…

Description

Affected products and versions

Other CVEs of EcoStruxure Building Operation Workstation