medium5.3
CVE-2026-2404
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security…
Impact
CWE-116 Improper Encoding or Escaping of Output vulnerability exists that could cause log injection and forged log when an attacker alters the POST /j_security check request payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Powerchute Serial Shutdown | before 1.5 |