CVE-2026-8044 is a CWE-88 vulnerability in Schneider Electric EcoStruxure IT Data Center Expert (formerly StruxureWare Data Center Expert) where improper neutralization of argument delimiters in command inputs can lead to argument injection. An attacker with privileged access could exploit this by providing malicious arguments during backup configuration operations, potentially resulting in remote code execution. The CVSS 4.0 base score is 8.6, indicating high severity. No official patch or remediation guidance has been published yet, and no known exploits have been observed in the wild.

The vulnerability could allow remote code execution on affected systems if exploited by an attacker possessing privileged credentials. This could lead to full system compromise or unauthorized control of the affected software environment. Since exploitation requires privileged access, the risk is limited to users with elevated permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict privileged account access and carefully validate backup configuration parameters to mitigate risk.