CVE-2026-2402 — Schneider Electric / PowerChute™ Serial Shutdown

CVE-2026-2402

Schneider Electric / PowerChute™ Serial Shutdown PUBLISHED

Description (CNA)

CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on a sequence of requests to multiple endpoints.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / PowerChute™ Serial Shutdown	affected Versions v1.4 and prior

CWE

CWE-307

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.