This vulnerability (CVE-2026-2403) affects Schneider Electric PowerChute™ Serial Shutdown versions 1.4 and earlier. It stems from improper validation of the quantity specified in the input to the POST /logsettings endpoint by a Web Admin user. Exploiting this flaw can truncate event and data logs, thereby compromising log integrity. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no user interaction, and low privileges required. The vulnerability does not impact confidentiality, availability, or system control but affects data integrity of logs. No patch or official fix is currently documented by Schneider Electric, and no exploits are known in the wild.

The primary impact is the truncation of event and data logs, which undermines the integrity of logging data. This can affect forensic analysis, auditing, and incident response by potentially hiding or altering log records. There is no indication of direct impact on system availability, confidentiality, or control. The vulnerability requires a Web Admin user to alter the POST /logsettings payload, indicating some level of privilege is needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is documented, organizations should monitor Schneider Electric advisories for updates. Until a patch is available, restrict Web Admin access to trusted personnel only and audit changes to log settings closely to detect any unauthorized or suspicious modifications.