Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.4

IGSS Definition Malicious CGF File Data Loss Risk

CVE-2026-12927 · published 3 months ago
Summary

Importing a malicious CGF file into IGSS Definition could cause loss of data or potentially allow an attacker to execute unauthorized code. This is a serious issue because it could compromise the integrity of your data and system. To protect yourself, ensure you only import CGF files from trusted sources and keep your IGSS Definition software up to date with the latest security patches.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
schneider electric igss definition (def.exe) Version 18.0.0.26124 and prior
Original advisory text
CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.
CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.4 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published29 Jul 2026
Updated3 Nov 2026
First seen29 Jul 2026
Sources
CVE-2026-12927 · NVD
CVE-2026-12927 · MITRE
Track software like this
Free during beta