CVE-2026-1227 | Schneider Electric EcoStruxure Building Operation Workstation TGML Graphics File xml external entity reference (SEVD-2026-041-02)

A vulnerability, which was classified as problematic, has been found in Schneider Electric EcoStruxure Building Operation Workstation and EcoStruxure Building Operation Webstation. Affected by this vulnerability is an unknown functionality of the component TGML Graphics File Handler. The manipulation leads to xml external entity reference.

This vulnerability is documented as CVE-2026-1227. The attack can be initiated remotely. There is not any exploit available.

It is suggested to install a patch to address this issue.