Vulnerability · Published May 14, 2026 · Assigned by schneider
CVE-2026-6332Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC
Medium 6.8
In plain English
A medium-severity security flaw in Ecostruxure™ Machine Expert HVAC from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Severity (CVSS 4.0)6.8Medium
Exploit odds (30 days)0.1%top 97.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | Ecostruxure™ Machine Expert HVAC | Versions prior to 1.10.0 |
Weakness: CWE-312 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N