PowerChute is vulnerable to improper output encoding, which may allow crafted input to be reflected in log files in unexpected ways. View CVE Details Affected Products Schneider Electric PowerChute Serial Shutdown Vendor:SuSE, Schneider Electric, Red Hat, Microsoft Product Version:SuSE, Schneider Electric, Red Hat, Microsoft PowerChute Serial Shutdown: <=1. 4 Product Status:known_affected Remediations Vendor fixSuSE, Schneider Electric, Red Hat, and Microsoft have identified the following specific workarounds and mitigations users can apply to reduce risk: (CVE-2026-2399, CVE-2026-2404, CVE-2026-2405, CVE-2026-2403, CVE-2026-2400, CVE-2026-2401) PowerChute Serial Shutdown Versions 1. 4 and prior: Version 1. 5 of PowerChute Serial Shutdown includes a fix for this vulnerability and is available for download here: Windows (https://www.
se. com/ww/en/download/document/SPD-PCSS_WIN_EN/). Linux (https://www. se. com/ww/en/download/document/SPD-PCSS_LNX_EN/).
https://www. se. com/ww/en/download/document/SPD-PCSS_WIN_EN/ Vendor fixSuSE, Schneider Electric, Red Hat, and Microsoft have identified the following specific workarounds and mitigations users can apply to reduce risk: (CVE-2026-2399, CVE-2026-2404, CVE-2026-2405, CVE-2026-2403, CVE-2026-2400, CVE-2026-2401) PowerChute Serial Shutdown Versions 1. 4 and prior: Version 1. 5 of PowerChute Serial Shutdown includes a fix for this vulnerability and is available for download here: Windows (https://www.
se. com/ww/en/download/document/SPD-PCSS_WIN_EN/). Linux (https://www. se. com/ww/en/download/document/SPD-PCSS_LNX_EN/).
https://www. se. com/ww/en/download/document/SPD-PCSS_LNX_EN/ MitigationSpecific instructions and hardening guidelines for these mitigations can be found in the Security Handbook. https://download. schneider-electric.
com/files? p_Doc_Ref=SPD_CCON-PCSSSH_EN Vendor fixPowerChute Serial Shutdown Version 1. 5 installed on Microsoft Windows are fixed versions for CVE-2026-2404. Vendor fixPowerChute Serial Shutdown Version 1.