VulnSocial

CVE-2026-13348Patch

MEDIUMCVSS 6.9 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number of authentication attempts when redirect handling is disabled.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-307

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Peaked 2d ago at 1 mentions (2026-09-17); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-09-17: 1Mentions · 2026-09-18: 1Mentions · 2026-09-19: 1Active Exploitation · 2026-09-18: 1Patch / Workaround · 2026-09-17: 1Patch / Workaround · 2026-09-19: 1Technical Details · 2026-09-17: 1Technical Details · 2026-09-18: 1Technical Details · 2026-09-19: 109-1709-1809-19
Signal classification2 categories
Patch
266.7%
Active Exploitation
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-171
Patch1
2026-09-181
Active Exploitation1
2026-09-191
Patch1
Full discourse3 posts
  • CyberWorldOps@CyberWorldOps
    Patch

    Schneider Electric discloses CVE-2026-13348 in PowerChute Serial Shutdown: unlimited login attempts enable brute-force account takeover. Patch now to protect UPS management. #CyberSecurity #InfoSec https://cyberworldops.eu/en/powerchute-authentication-flaw-opens-the-door-to-unlimited-login

    Post summary

    Schneider Electric disclosed CVE-2026-13348 in PowerChute Serial Shutdown, noting unlimited login attempts that enable brute‑force account takeover and urging users to apply the patch; the post includes technical details and a clear remediation call with no evidence of active exploitation.

    0000051
    11 followersView on X
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows attackers exploiting CVE-2026-13348 in Schneider Electric PowerChute systems through unlimited authentication attempts to compromise UPS management infrastructure. Once inside, lateral movement through unencrypted east-west traffic enables broader industrial network access. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/schneider-electric-powerchute-serial-shutdown-cve-2026-13348-authentication-bypass-vulnerability

    Post summary

    The text reports active exploitation of CVE-2026-13348 in Schneider Electric PowerChute systems, describing how attackers use unlimited authentication attempts to compromise UPS infrastructure and move laterally.

    0000052
    2.0K followersView on X
  • NewsTongue@NewsTongueX
    Patch

    🔴 Schneider Electric patches authentication bypass in PowerChute UPS software Schneider Electric released version 1.6 of PowerChute Serial Shutdown to fix a CWE-307 vulnerability (CVE-2026-13348) affecting versions 1.5 and prior. • Flaw allows attackers unlimited authentication attempts when redirect handling is disabled, risking unauthorized account access and data exposure • Affects UPS management software deployed worldwide across commercial facilities, critical manufacturing, energy, and IT sectors • Fix deployed for Windows and Linux; automatic service restart required upon installation

    Post summary

    Schneider Electric has released PowerChute Serial Shutdown version 1.6 to patch an authentication bypass (CVE‑2026‑13348) affecting versions 1.5 and earlier.

    0000058
    908 followersView on X

Explore more

Back to dashboard