CVE-2026-2404

CVE-2026-2404CVE-2026-2404

schneider-electric / powerchute_serial_shutdown

Description

CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payload.

Scoring

CVSS 5.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Last modified2026-10-26
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.