Schneider Electric PowerChute Serial Shutdown

As cited

Copy frozen at 2026-09-17 23:03 UTC (site build).

vulnerabilities

Schneider Electric PowerChute Serial Shutdown

Schneider Electric released a patch for CVE-2026-13348, an improper restriction of excessive authentication attempts vulnerability in PowerChute Serial Shutdown versions 1.5 and earlier. The flaw allows attackers to gain unauthorized account access through brute force when redirect handling is disabled, with a CVSS score of 5.3. Version 1.6 fixes the issue and is available for Windows and Linux platforms.

Why it matters: Organizations running PowerChute Serial Shutdown 1.5 or earlier for UPS management face credential compromise risk and should update to version 1.6 immediately, especially in critical infrastructure environments including energy, manufacturing, and data centers.

Source published

2026-09-17 12:00 UTC

First seen by Cybersecurity Tracker

2026-09-17 18:22 UTC