Back to search
CVE-2026-2399
Published: Apr 14, 2026
Modified: Apr 14, 2026
PUBLISHED
Description
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data when a Web Admin user alters the POST /REST/upssleep request payload.
| Vendor | Product | Versions |
|---|---|---|
Schneider Electric | PowerChute™ Serial Shutdown | affected Versions 1.4 and prior |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now