PT-2026-32674 · Schneider Electric · Powerchute Serial Shutdown

Published 2026-04-14 · Updated 2026-04-19 · CVE-2026-2402

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description Improper Restriction of Excessive Authentication Attempts allows an attacker to gain access to a user account by performing an arbitrary number of authentication attempts with different credentials across a sequence of requests to multiple endpoints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2026-07590

CVE-2026-2402

Affected Products

Powerchute Serial Shutdown

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-2402 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-01.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07590 · Security Note
• https://twitter.com/CVEnew/status/2045889787433730427 · Twitter Post
• https://twitter.com/infoflowcloud/status/2045891312923082944 · Twitter Post