Advisories · Technology

Schneider Electric PowerChute™ Serial Shutdown.

Every CVE that names Schneider Electric PowerChute™ Serial Shutdown among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-13348 CVE record

CVSS 6.9 Medium

Unlimited authentication attempts in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Authentication bypass
Not analysed yet 1 Sept 2026
CVE-2026-2401 CVE record

CVSS 2.4 Low

Sensitive information in log files in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Information disclosure
Not analysed yet 14 Apr 2026
CVE-2026-2400 CVE record

CVSS 5.3 Medium

CRLF injection in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Other injection
Not analysed yet 14 Apr 2026
CVE-2026-2403 CVE record

CVSS 5.3 Medium

CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user alters the POST /logsetti…
- Schneider Electric PowerChute™ Serial Shutdown
- CWE-1284
Not analysed yet 14 Apr 2026
CVE-2026-2405 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Denial of service
Not analysed yet 14 Apr 2026
CVE-2026-2402 CVE record

CVSS 6.9 Medium

Unlimited authentication attempts in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Authentication bypass
Not analysed yet 14 Apr 2026
CVE-2026-2404 CVE record

CVSS 6.9 Medium

Improper output encoding in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- CWE-116
Not analysed yet 14 Apr 2026
CVE-2026-2399 CVE record

CVSS 6.9 Medium

Path traversal in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Path traversal
Not analysed yet 14 Apr 2026
CVE-2025-11567 CVE record

CVSS 7.3 High

Incorrect default permissions in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Broken access control
Not analysed yet 12 Nov 2025
CVE-2025-11566 CVE record

CVSS 6.9 Medium

Unlimited authentication attempts in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Authentication bypass
Not analysed yet 12 Nov 2025
CVE-2025-11565 CVE record

CVSS 7.3 High

Path traversal in Schneider Electric PowerChute™ Serial Shutdown
- Schneider Electric PowerChute™ Serial Shutdown
- Path traversal
Not analysed yet 12 Nov 2025