Is CVE-2026-9651 actively exploited?

No active exploitation of CVE-2026-9651 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-9651 be exploited remotely?

No. CVE-2026-9651 requires local access to exploit.

What is the CVSS score of CVE-2026-9651?

CVE-2026-9651 has a CVSS score of 6.7 (MEDIUM).

HOME VULNERABILITIESCVE-2026-9651

MEDIUM

CVE-2026-9651

CWE-732Published: June 25, 2026· Updated: Jun 25, 2026

6.7

CVSS v3.1

EPSS:0.11%probability of exploitation in 30 daysPercentile:1.3th

Official Description

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

NVD Source

Technical Analysis

CVE-2026-9651 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.High

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

News & Research Mentioning CVE-2026-9651

Schneider Electric EasyLogic T150 and Saitel DP RTU

CISA Alerts· Jun 30, 2026

View CSAF Summary Successful exploitation of these vulnerabilities can allow an attacker to cause unauthorized access and exposure of sensitive information when the unauthenticated attacker accesses credentials stored within firmware or system files. The following versions of Schneider Electric EasyLogic T150 and Saitel DP RTU are affected: EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller <=11.06.30 (CVE-2026-9650) EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller <=11.06.31 (CVE-2026-9651) Saitel DP Remote Terminal Unit & Controller <=11.06.35 (CVE-2026-9650) Saitel DP Remote Terminal Unit & Controller <=11.06.37 (CVE-2026-9651) CVSS Vendor Equipment Vulnerabilities v3 7.5 Schneider Electric Schneider Electri [xlite_meta score:79 src:CISA Alerts xlite_fp:803b0fd8f963a9cd3d47c275df516b80ee32593ea17e8fcf47b0b2034f672dd5]