[Control systems] Schneider Electric security advisory (AV26-119)

Serial number: AV26-119
Date: February 11, 2026

On February 10, 2026, Schneider Electric published advisories to address vulnerabilities in the following products:

• EcoStruxure Building Operation Workstation and WebStation – 7.0.x versions prior to 7.0.3.2000 (CP1)
• EcoStruxure Building Operation Workstation and WebStation – 6.x versions prior to 6.0.4.14001 (CP10)
• SCADAPack 47x/47xi – versions prior to R3.4.2 (Firmware version prior to 9.12.2)
• SCADAPack 57x – all versions
• RemoteConnect – versions prior to R3.4.2

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Multiple Vulnerabilities on EcoStruxure Building Operation Workstation and EcoStruxureTM Building Operation Webstation
• Improper Check for Unusual or Exceptional Conditions on Multiple Products
• Schneider Electric Security Notifications