Schneider Electric Powerlogic t300 vulnerabilities

2 CVEs affecting Schneider Electric Powerlogic t300, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-77120, published 2026-09-09.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-77120, published 2026-09-09. High severity, CVSS 8.7. EPSS: 0.7% chance of exploitation in the next 30 days. CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthorized execution of…
• CVE-2026-4827, published 2026-05-12. High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days. CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.