8.6
High
CVE-2026-8044 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that…
Description
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) | Versions not published |