CVE-2026-2402
CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on a sequence of requests to multiple endpoints.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2402?
CVE-2026-2402 is classified as a high severity vulnerability due to its potential to allow unauthorized access to user accounts.
How do I fix CVE-2026-2402?
To fix CVE-2026-2402, it is recommended to upgrade to a version of Schneider Electric PowerChute Serial Shutdown that is greater than 1.5.
What kind of attacks can exploit CVE-2026-2402?
CVE-2026-2402 can be exploited through brute force attacks by attempting multiple authentication requests with different credentials.
What software is affected by CVE-2026-2402?
CVE-2026-2402 affects Schneider Electric PowerChute Serial Shutdown versions up to 1.5.
Is there a workaround for CVE-2026-2402?
Currently, there are no documented workarounds for CVE-2026-2402; upgrading to a secure version is necessary for mitigation.