CVE-2026-9717 — Schneider Electric / PowerLogic™ P7

CVE-2026-9717

Schneider Electric / PowerLogic™ P7 PUBLISHED

Description (CNA)

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / PowerLogic™ P7	affected Version V02.003.001.000 and prior

CWE

CWE-78

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-03.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.