CVE-2026-9716
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk18th percentile — higher than 18% of all known CVEs
Summary
A CWE-476 NULL Pointer Dereference vulnerability could cause a denial-of-service condition, making the device's HMI and configuration functionality unavailable when malformed requests are received over exposed network interfaces.
Risk Assessment
An attacker can remotely trigger a denial of service, disrupting operator access and configuration management, leading to system downtime.
Recommendation
Apply the vendor-supplied patch immediately and restrict network interface access to trusted hosts only.
Original NVD description (English source)
CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when malformed requests are received over exposed network interfaces.