Uncontrolled Resource Consumption in Web Admin Causes DoS

Publication date: 2026-04-14

Last updated on: 2026-04-22

Assigner: Schneider Electric SE

Description

CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-14

Last Modified

2026-04-22

Generated

2026-07-06

AI Q&A

2026-04-14

EPSS Evaluated

2026-07-05

NVD

CVE-2026-2405

EUVD

EUVD-2026-22293

Affected Vendors & Products

Vendor	Product	Version / Range
schneider-electric	powerchute_serial_shutdown	to 1.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a CWE-400 Uncontrolled Resource Consumption issue. It occurs when a Web Admin user sends a large number of POST /helpabout requests, causing the system to create excessive troubleshooting zip files. This excessive resource usage can lead to a denial of service.

Impact Analysis

The vulnerability can impact you by causing a denial of service condition. When exploited, it can overwhelm the system with resource consumption due to excessive creation of troubleshooting zip files, potentially making the system unavailable or degraded in performance.

Hi! I’m here to help you understand CVE-2026-2405. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70