CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 30, 2026, 4:10 AM ET)

What this means for you

This week: 3,347 CVEs published, 230 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,347; Show in the list
Critical, last 7 days: 230; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,764; Show in the list

Showing CVEs that name the product schneider_electric:powerchutetm_serial_shutdown. Show all products

11 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-13348	Medium 6.9	CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number of… Assigned by schneider	Sep 1, 2026
CVE-2026-2401	Low 2.4	CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious file provided by an at… Assigned by schneider	Apr 14, 2026
CVE-2026-2400	Medium 5.3	CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the POST /setPCBEDesc requ… Assigned by schneider	Apr 14, 2026
CVE-2026-2403	Medium 5.3	CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log truncation impacting log integrity when a Web Admin user alters the POST /logsetti… Assigned by schneider	Apr 14, 2026
CVE-2026-2405	Medium 5.3	CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /he… Assigned by schneider	Apr 14, 2026
CVE-2026-2402	Medium 6.9	CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to the user account by performing an arbitrary number of authenticat… Assigned by schneider	Apr 14, 2026
CVE-2026-2404	Medium 6.9	CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payload. Assigned by schneider	Apr 14, 2026
CVE-2026-2399	Medium 6.9	CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data when a Web Admin user alters the… Assigned by schneider	Apr 14, 2026
CVE-2025-11567	High 7.3	CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured. Assigned by schneider	Nov 12, 2025
CVE-2025-11566	Medium 6.9	CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary… Assigned by schneider	Nov 12, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.