Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2977 articles · 110847 vulns · 36/41 feeds (7d)
← Back to list
—
CVE-2026-2403EXPLOITED
schneider electric · powerchute serial shutdown

CVE-2026-2403: CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log tru

Description

CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user alters the POST /logsettings request payload.

Affected Products

VendorProductVersions
schneider electricpowerchute serial shutdownVersions 1.4 and prior

References

  • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-01.pdf

Related News (1 articles)

Tier C
VulDB6h ago
CVE-2026-2403 | Schneider Electric PowerChute Serial Shutdown /logsettings improper validation of specified quantity in input (SEVD-2026-104-01)
→ No new info (linked only)
CISA KEV❌ No
Actively exploited✅ Yes
CWECWE-1284
PublishedApr 14, 2026
Last enriched5h agov2
Trending Score39
Source articles1
Independent1
Info Completeness7/14
Missing: cvss, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-2402EXP
CVE-2026-2402: CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to g
Trending: 49
NONECVE-2026-4832EXP
CVE-2026-4832: CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device info
Trending: 49
NONECVE-2026-2405EXP
CVE-2026-2405: CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creat
Trending: 39
HIGHCVE-2026-2404
CVE-2026-2404: CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when
Trending: 36
CRITICALCVE-2026-2399
CVE-2026-2399: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could ca
Trending: 35

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 14, 2026
Discovered by ZDM
Apr 14, 2026
Updated: severity, activelyExploited
Apr 14, 2026
Actively Exploited
Apr 14, 2026

Version History

v2
Last enriched 5h ago
v2Tier C5h ago

Updated severity to HIGH, marked as actively exploited, and corrected exploit availability to false.

severityactivelyExploited
via VulDB
v16h ago

Initial creation