CVE-2026-12927: Schneider Electric Igss Definition Def.exe

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.

Affected products

• Schneider Electric Igss Definition Def.exe: up to and including 18.0.0.26124

Published 2026-07-29. Last modified 2026-07-30.