CVE-2026-49003

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameters and triggering abnormal operation of the entire power system.

  • Published Aug 31, 2026
  • CVSS 9.6 critical
  • 2.4% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-49003 at the National Vulnerability Database