← Database

CVE-2026-9717

HIGH CVSS: 7.2 Published: 2026-06-25 Modified: 2026-07-01

Description

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

Affected Platforms

Schneider-Electric Powerlogic P7 FirmwareSchneider-Electric Powerlogic P7

Weakness Type

CWE-78

References