← All Advisories

CVE-2026-12927

Last refreshed2026-10-06

Status: UPDATED  |  Advisory ID: CVE-2026-12927

Key Details

CVECVE-2026-12927
CVSS Score / Version8.4 (High) / CVSS v4.0
Updated2026-07-30
Affected productsSchneider Electric IGSS Definition (Def.exe)
Classified asCWE-787 (Out-of-bounds Write)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Schneider ElectricIGSS Definition (Def.exe)
SubsystemsGeneral OT
SectorsMultiple

What to Know

CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.

What to Do

Monitor Schneider Electric's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-12927
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-12927