CVE-2026-2402Disclosure(schneider-electric / powerchute_serial_shutdown)

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on a sequence of requests to multiple endpoints.

schneider-electric CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-01.pdf

Weakness type (CWE)

CWE-307

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

powerchute_serial_shutdown

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

schneider-electric

Products

powerchute_serial_shutdown

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud174d
Disclosure
🚨*CVE* CVE-2026-2402 CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an … https://www.cve.org/CVERecord?id=CVE-2026-2402 ----- Traducción: CVE-2026-2402 CWE… http://infoflow.cloud`
Post summary
The post is a brief disclosure of CVE-2026-2402, highlighting an authentication‑attempt restriction flaw, with no PoC, exploit code, or patch information provided.
0000034
72 followersView on X
CVE@CVEnew174d
General
CVE-2026-2402 CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an … https://www.cve.org/CVERecord?id=CVE-2026-2402
Post summary
A brief mention of CVE-2026-2402 as a CWE-307 authentication‑bypass flaw, with a link to the official CVE record but no additional exploit or mitigation details.
00000161
57.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	schneider-electric	powerchute_serial_shutdown	-	-	-

Explore more

Back to dashboard schneider-electric CVEs powerchute_serial_shutdown vulnerabilities