CVE-2026-9717: OS Command Injection
Published Jun 25, 2026
·Updated
CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.
Affected Software
2 affected components
All of the following
Schneider-electric Powerlogic P7 Firmware<02.004.001.000
Schneider-electric Powerlogic P7
Event History
Jun 25, 2026
CVE Published
via MITRE·03:05 PM
Data Sourced
via MITRE·03:05 PM
DescriptionWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Jan 16, 58471
Event
via FIRST·08:18 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-9717?
CVE-2026-9717 has a high severity rating of 8.6.
2
What is the risk associated with CVE-2026-9717?
The risk level for CVE-2026-9717 is assessed at 54.
3
How do I fix CVE-2026-9717?
To mitigate CVE-2026-9717, ensure that any input to OS commands is properly sanitized to prevent command injection.
4
Who is affected by CVE-2026-9717?
CVE-2026-9717 affects systems where privileged authenticated users can execute OS commands without proper input validation.
5
What type of vulnerability is CVE-2026-9717?
CVE-2026-9717 is categorized as an OS Command Injection vulnerability.