Vulnerabilities

CVSS

5.3 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Risk score

42.4

Published

2026-04-14

Status

Analyzed

CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payload.

Weaknesses

CWE-116

Coverage 1

vulnerability

Schneider Electric PowerChute Serial Shutdown

Schneider Electric PowerChute Serial Shutdown versions 1.4 and earlier contain multiple vulnerabilities that could allow attackers to overwrite critical files, inject malicious data, gain unauthorized access, or trigger…

CISA Advisories · Jul 9, 2026 High

CVE-2026-2399CVE-2026-2404CVE-2026-2405vulnerabilitypatchsecurity advisory

All articles mentioning it

Advisories and references

• download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_e...