QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-2402

Back to search

CVE-2026-2402

Published: Apr 14, 2026

Modified: Apr 14, 2026

PUBLISHED

Description

CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on a sequence of requests to multiple endpoints.

VendorProductVersions

Schneider Electric

PowerChute™ Serial Shutdown

affected
Versions v1.4 and prior

Weaknesses (CWE)

CWE-307

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now