Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Risk score

52.0

Published

2026-04-14

Status

Analyzed

CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

Weaknesses

CWE-400

Coverage 1

vulnerability

Schneider Electric PowerChute Serial Shutdown

Schneider Electric PowerChute Serial Shutdown versions 1.4 and earlier contain multiple vulnerabilities that could allow attackers to overwrite critical files, inject malicious data, gain unauthorized access, or trigger…

CISA Advisories · Jul 9, 2026 High

CVE-2026-2399CVE-2026-2404CVE-2026-2405vulnerabilitypatchsecurity advisory

All articles mentioning it

Advisories and references

• download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_e...