CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 18:56.

Filters

1 active

Reset filters

Search: SEVD-2026-104-01

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SEVD-2026-104-01

Multiple Vulnerabilities on PowerChute™ Serial Shutdown

Schneider Electric — Microsoft Windows

Schneider Electric CPCERTmiddel

Published

14 April 2026

Last update

14 April 2026

Linked CVEs

CVE-2026-2399 CVE-2026-2404 CVE-2026-2402 CVE-2026-2405 CVE-2026-2403 CVE-2026-2400 CVE-2026-2401

Affected sectors

Risk evaluation

Schneider Electric is aware of vulnerabilities in its PowerChute™ Serial Shutdown product. The [PowerChute Serial Shutdown](https://www.se.com/ww/en/product-range/137943580-powerchute-serial-shutdown/#products) product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and workstations. Failure to apply the remediation provided below may risk improper input validation which could result in disruption of operations and access to system data.

Mitigation summary

Version v1.5 of PowerChute™ Serial Shutdown includes a fix for this vulnerability and is available for download here: • Windows: https://www.se.com/ww/en/download/document/SPD-PCSS_WIN_EN/ Specific instructions and hardening guidelines for these mitigations can be found in the [Security Handbook](https://download.schneider-electric.com/files?p_Doc_Ref=SPD_CCON-PCSSSH_EN).

Revision history (1)

Initial publication — 14 April 2026
Original Release

Official source: Schneider Electric CPCERT