Vulnerability Details CVE-2026-9717
CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 64.5%
CVSS Severity
CVSS v3 Score 7.2
Products affected by CVE-2026-9717
-
cpe:2.3:h:schneider-electric:powerlogic_p7:-
-
cpe:2.3:o:schneider-electric:powerlogic_p7_firmware:*