EcoStruxure Building Operation Webstation vulnerabilities

2 known vulnerabilities in EcoStruxure Building Operation Webstation from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  EcoStruxure Building Operation Workstation: Improper Restriction of XML External Entity Reference

  CVE-2026-1227Feb 11, 2026Schneider Electric

  CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclosure of local files, interaction within the EBO system, or denial of service conditions when a local user uploads a specially crafted TGML g

• 7.0 High severity

  EcoStruxure Building Operation Workstation: Improper Control of Generation of Code

  CVE-2026-1226Feb 11, 2026Schneider Electric

  CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintended code within the application when maliciously crafted design content is processed through a TGML graphics file.