CVE-2026-9717

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

Score

CVSS 4.0 8.6 High

Status

Analyzed - cybersecurity@se.com

Published

2026-06-25

Last modified

2026-10-25

Weaknesses

CWE-78

Affected products

• Powerlogic P7 Firmware (Schneider-electric)
• Powerlogic P7 (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-03&p_enDocType=Security+and+Safety+Notice&p_File_…