CVE-2026-9716

CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when malformed requests are received over exposed network interfaces.

Score

CVSS 4.0 8.7 High

Status

Analyzed - cybersecurity@se.com

Published

2026-06-25

Last modified

2026-10-25

Weaknesses

CWE-476

Affected products

• Powerlogic P7 Firmware (Schneider-electric)
• Powerlogic P7 (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-03&p_enDocType=Security+and+Safety+Notice&p_File_…