CVE-2026-77120

Last refreshed2026-10-06

Status: UPDATED | Advisory ID: CVE-2026-77120

Key Details

CVE	CVE-2026-77120
CVSS Score / Version	8.7 (High) / CVSS v4.0
Updated	2026-09-09
Affected products	Schneider Electric PowerLogic T300
Classified as	CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Schneider Electric	PowerLogic T300

Vendor

Product

Affected Versions

Patch Status

Schneider Electric

PowerLogic T300

Subsystems	General OT
Sectors	Multiple

What to Know

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating system console that improperly processes user-controlled input.

What to Do

Monitor Schneider Electric's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-77120
CVE	https://www.cve.org/CVERecord?id=CVE-2026-77120

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-77120

CVE