1. Home
  2. CVE Database
  3. CVE-2026-9651
MEDIUM · 4.4

CVE-2026-9651

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privilege...

Vulnerability Description

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Schneider-ElectricEasylogic T150 Firmware< 11.06.32
Schneider-ElectricEasylogic T150-
Schneider-ElectricSaitel Dp Firmware< 11.06.38
Schneider-ElectricSaitel Dp-

Related Weaknesses (CWE)

CWE-732

References

FAQ

What is CVE-2026-9651?

CVE-2026-9651 is a vulnerability with a CVSS score of 4.4 (MEDIUM). CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privilege...

How severe is CVE-2026-9651?

CVE-2026-9651 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-9651?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Easylogic T150 Firmware, Schneider-Electric Easylogic T150, Schneider-Electric Saitel Dp Firmware, Schneider-Electric Saitel Dp.