CVE-2026-49003
Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameters and triggering abnormal operation of the entire power system.
- Published Aug 31, 2026
- CVSS 9.6 critical
- 2.4% chance of exploitation in the next 30 days (EPSS)