CVE-2026-9717

Name of the Vulnerable Software and Affected Versions Schneider Electric PowerLogic P7 (affected versions not specified)

Description An OS Command Injection issue exists in the firmware of the device, which occurs when special elements used in OS commands are not properly neutralized. This flaw allows a privileged authenticated user to execute arbitrary commands with elevated privileges via a network-exposed service, potentially compromising system integrity, confidentiality, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.