CVE-2026-6332: Schneider Electric Ecostruxure Machine Expert Hvac

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.

Affected products

• Schneider Electric Ecostruxure Machine Expert Hvac: before 1.10.0 (fixed in 1.10.0)

Published 2026-05-14. Last modified 2026-06-17.