Vulnerabilities

CVSS

6.1 Medium

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Risk score

48.8

Published

2026-04-14

Status

Analyzed

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data when a Web Admin user alters the POST /REST/upssleep request payload.

Weaknesses

CWE-22

Coverage 1

vulnerability

Schneider Electric PowerChute Serial Shutdown

Schneider Electric PowerChute Serial Shutdown versions 1.4 and earlier contain multiple vulnerabilities that could allow attackers to overwrite critical files, inject malicious data, gain unauthorized access, or trigger…

CISA Advisories · Jul 9, 2026 High

CVE-2026-2399CVE-2026-2404CVE-2026-2405vulnerabilitypatchsecurity advisory

All articles mentioning it

Advisories and references

• download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_e...