ot engineering workstation

Schneider Electric’s EcoStruxure Machine Expert HVAC versions before 1.10.0 contain a medium-severity cleartext storage vulnerability, disclosed by Schneider on May 12, 2026 and republished by CISA on May 28, that can expose protected controller source code to an authorized local attacker. The...

Schneider Electric has patched a high-severity code injection flaw in EcoStruxure Automation Expert, and the fix matters well beyond a single software update. The advisory says versions prior to v25.0.1 are affected and warns that an authenticated user opening a malicious project file could...