7.0
High
CVE-2026-1286 CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity…
Description
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure™ Foxboro DCS | Versions not published |