cve-2026-2273

CVE-2026-2273 is a high-severity code injection vulnerability in Schneider Electric's EcoStruxure Automation Expert, affecting versions prior to v25.0.1. An authenticated user who opens a malicious project file could trigger untrusted command execution on the engineering workstation, potentially compromising system confidentiality, integrity, and availability. In industrial environments, this flaw is especially dangerous because engineering workstations often serve as a pivot point into broader operational technology networks. The tag covers discussions about the patch, mitigation strategies, and the broader implications for industrial cybersecurity.