CVE-2026-13348

Published on September 1, 2026

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number of authentication attempts when redirect handling is disabled.

Weakness type (CWE)CWE-307

Vulnerabilities

PowerChute Authentication Flaw Opens the Door to Unlimited Login Attempts

Schneider Electric CVE-2026-13348 lets remote attackers brute-force PowerChute Serial Shutdown logins. Learn affected versions and how v1.6 fixes it.

Sep 18, 202623:285 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

PowerChute Authentication Flaw Opens the Door to Unlimited Login Attempts