Is CVE-2026-1286 actively exploited?

No active exploitation of CVE-2026-1286 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-1286 be exploited remotely?

No. CVE-2026-1286 requires local access to exploit.

What is the CVSS score of CVE-2026-1286?

CVE-2026-1286 has a CVSS score of 7.0 (HIGH).

HOME VULNERABILITIESCVE-2026-1286

HIGH

CVE-2026-1286

CWE-502Published: March 10, 2026· Updated: Mar 11, 2026

7.0

CVSS v3.1

EPSS:0.22%probability of exploitation in 30 daysPercentile:44.5th

Official Description

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file.

NVD Source

Technical Analysis

CVE-2026-1286 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-502): Insecure deserialization vulnerabilities allow attackers to inject malicious objects during deserialization, potentially enabling remote code execution.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.High

User InteractionP

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

News & Research Mentioning CVE-2026-1286

Schneider Electric EcoStruxure Foxboro DCS

CISA Alerts· Mar 24, 2026

View CSAF Summary Schneider Electric is aware of a vulnerability in its EcoStruxure Foxboro DCS Control Software on Foxboro DCS workstations and servers. Control Core Services and all runtime software, like FCPs, FDCs, and FBMs, are not affected. The EcoStruxure Foxboro DCS ([https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/](https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/)) product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and elevates staff capabilities to ensure flawless, continuous plant operation. Failure to apply the remediation provided below may risk deserialization of untrusted data, which could result in loss of confidenti [xlite_meta score:73 src:CISA Alerts xlite_fp:c34168317c4f3593bffb983b3de1525005a9f89022cd69a6ac411f5e0d675149]