What is CVE-2026-9717?

CVE-2026-9717 is a high-severity vulnerability in Schneider Electric Powerlogic™ P7, classified under OS Command Injection. CVSS score: 7.2/10. Published 2026-06-25.

How severe is CVE-2026-9717?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Schneider Electric Powerlogic™ P7

CVE-2026-9717

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and av…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Schneider Electric Powerlogic™ P7 — versions Version V02.003.001.000 and prior
Schneider-electric Powerlogic_p7
Schneider-electric Powerlogic_p7_firmware

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cybersecurity@se.com (Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2026-9717?: CVE-2026-9717 is a high-severity vulnerability in Schneider Electric Powerlogic™ P7, classified under OS Command Injection. CVSS score: 7.2/10. Published 2026-06-25.
How severe is CVE-2026-9717?: High severity. CVSS v3 base score is 7.2 out of 10.