CVE-2026-9651
Medium
Description
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.
SeverityMedium
CVSS4.4
Exploit probability—
ProductSchneider-electric Easylogic T150 Firmware
PublishedJun 25, 2026
First seenJun 25, 2026
Weakness typeCWE-732CWE-732
How to fix
Update
- schneider-electric easylogic_t150_firmware11.06.32 or later
- schneider-electric saitel_dp_firmware11.06.38 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric easylogic_t150_firmware | v < 11.06.32 | 11.06.32 |
| schneider-electric saitel_dp_firmware | v < 11.06.38 | 11.06.38 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.