CVE-2026-2405
Received Received - Intake
Uncontrolled Resource Consumption in Web Admin Causes DoS

Publication date: 2026-04-14

Last updated on: 2026-04-22

Assigner: Schneider Electric SE

Description
CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-14
Last Modified
2026-04-22
Generated
2026-06-16
AI Q&A
2026-04-14
EPSS Evaluated
2026-06-15
NVD
CVE-2026-2405
EUVD
EUVD-2026-22293
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
schneider-electric powerchute_serial_shutdown to 1.5 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a CWE-400 Uncontrolled Resource Consumption issue. It occurs when a Web Admin user sends a large number of POST /helpabout requests, causing the system to create excessive troubleshooting zip files. This excessive resource usage can lead to a denial of service.

Impact Analysis

The vulnerability can impact you by causing a denial of service condition. When exploited, it can overwhelm the system with resource consumption due to excessive creation of troubleshooting zip files, potentially making the system unavailable or degraded in performance.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-2405. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart