CVE-2026-7695 is a SQL injection vulnerability in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform version 1.3.0. The flaw exists in the /SubstationWEBV2/main/elecMaxMinAvgValue endpoint, where manipulation of the fCircuitids argument can lead to SQL injection. The vulnerability can be exploited remotely without authentication. Public exploit code has been disclosed, but the vendor has not responded or provided a fix.