Schneider HMI Null Pointer Deref in Network Request -> DoS
CVE-2026-9716 Published on June 25, 2026

CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the devices HMI and configuration functionality unavailable when malformed requests are received over exposed network interfaces.

NVD

Vulnerability Analysis

CVE-2026-9716 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE

Weakness Type

NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.


Affected Versions

Schneider Electric PowerLogic™ P7 Version Version V02.003.001.000 and prior is affected by CVE-2026-9716