Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2977 articles · 110847 vulns · 36/41 feeds (7d)
← Back to list
—
CVE-2026-2405EXPLOITED
schneider electric · powerchute serial shutdown

CVE-2026-2405: CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creat

Description

CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

Affected Products

VendorProductVersions
schneider electricpowerchute serial shutdownVersions 1.4 and prior

References

  • https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-01.pdf

Related News (1 articles)

Tier C
VulDB6h ago
CVE-2026-2405 | Schneider Electric PowerChute Serial Shutdown ZIP File Creation /helpabout resource consumption (SEVD-2026-104-01)
→ No new info (linked only)
CISA KEV❌ No
Actively exploited✅ Yes
CWECWE-400
PublishedApr 14, 2026
Last enriched5h agov2
Trending Score39
Source articles1
Independent1
Info Completeness7/14
Missing: cvss, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-2402EXP
CVE-2026-2402: CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to g
Trending: 49
NONECVE-2026-4832EXP
CVE-2026-4832: CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device info
Trending: 49
NONECVE-2026-2403EXP
CVE-2026-2403: CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log tru
Trending: 39
HIGHCVE-2026-2404
CVE-2026-2404: CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when
Trending: 36
CRITICALCVE-2026-2399
CVE-2026-2399: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could ca
Trending: 35

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 14, 2026
Discovered by ZDM
Apr 14, 2026
Updated: severity, activelyExploited
Apr 14, 2026
Actively Exploited
Apr 14, 2026

Version History

v2
Last enriched 5h ago
v2Tier C5h ago

Updated severity to HIGH, marked as actively exploited, and confirmed no exploit is available.

severityactivelyExploited
via VulDB
v16h ago

Initial creation