Findings

CVE-2026-2405

CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user…

Published Apr 14, 2026 · updated Jun 17, 2026 · schneider-electric powerchute serial shutdown

CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 14, 2026 · NIST NVD

    Detected

    CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

  2. Jun 17, 2026 · NIST NVD

    Updated

    CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

Affected

  • cpe schneider-electric/powerchute serial shutdownversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-2405

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-2405

    CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

    nvd.nist.gov

References

CVE-2026-2405 · ZeroDay Findings