5.3
Medium
CVE-2026-2400 CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application…
Description
CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the POST /setPCBEDesc request payload.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerChute™ Serial Shutdown | Versions not published |
Other CVEs of PowerChute™ Serial Shutdown
The 11 CVEs of PowerChute™ Serial Shutdown →
CVE-2026-13348
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker…
6.9
Medium
CVE-2026-2401
CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information…
2.4
Low
CVE-2026-2403
CWE-1284 Improper Validation of Specified Quantity in Input vulnerability exists that could cause Event and Data Log…
5.3
Medium
CVE-2026-2405
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file…
5.3
Medium