VulnSocial

CVE-2026-8044Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-88

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-10); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-10: 1Mentions · 2026-10-13: 1Patch / Workaround · 2026-10-13: 1Technical Details · 2026-09-10: 1Technical Details · 2026-10-13: 109-1010-13
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-101
Disclosure1
2026-10-131
Patch1
Full discourse2 posts
  • JeanRostand8@LeJeanRostand
    Patch

    @Webologie_me CERT-FR signale RCE et SSRF dans EcoStruxure IT Data Center Expert avant 9.1.2 (CVE-2026-19233, CVE-2026-8044). Et contournement de politique de sécurité Admin Expert ≤ 4.2.0 (CVE-2026-14354). Schneider Electric a des vulnérabilités industrielles nombreuses

    Post summary

    The tweet reports three CVEs in Schneider Electric EcoStruxure IT Data Center Expert (RCE, SSRF, and privilege escalation) with fixed version references, and notes Schneider Electric has numerous industrial vulnerabilities.

    1101053
    267 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8044 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker wi… https://www.cve.org/CVERecord?id=CVE-2026-8044

    Post summary

    The post announces CVE‑2026‑8044, identified as a CWE‑88 argument‑injection issue that may lead to remote code execution, but it provides no PoC, exploit, patch, or active‑use details.

    00000760
    58.1K followersView on X

Explore more

Back to dashboard