CVE-2026-9717 — HIGH (7.2) — White Hats Nepal

Q: How severe is CVE-2026-9717?

CVE-2026-9717 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-9717?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Powerlogic P7 Firmware, Schneider-Electric Powerlogic P7.

Vulnerability Description

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Schneider-Electric	Powerlogic P7 Firmware	< 02.004.001.000
Schneider-Electric	Powerlogic P7	-

Related Weaknesses (CWE)

CWE-78

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-03&p_enDocVendor AdvisoryMitigation

FAQ

What is CVE-2026-9717?

CVE-2026-9717 is a vulnerability with a CVSS score of 7.2 (HIGH). CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting sy...

How severe is CVE-2026-9717?

CVE-2026-9717 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-9717?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Powerlogic P7 Firmware, Schneider-Electric Powerlogic P7.