← Database

CVE-2026-2404

MEDIUM CVSS: 5.3 Published: 2026-04-14 Modified: 2026-06-17

Description

CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payload.

Affected Platforms

Schneider-Electric Powerchute Serial Shutdown

Weakness Type

CWE-116

References