PowerChute is flagged as vulnerable to CVE-2026-91403

Issue:

PowerChute has been flagged as vulnerable to CVE-2026-91403

Products:

PowerChute Serial Shutdown 1.6

PowerChute Network Shutdown 5.2

Environment:

All support operating systems

Cause:

PowerChute ships with OpenJDK version 21

Solution:

Update the Java that PowerChute uses to version 21.0.13+9. You can download the latest OpenJDK from this link.

https://adoptium.net/temurin/releases?version=21&os=any&arch=any

1 - After downloading the latest version, to update the PowerChute Java navigate to the PowerChute folder/directory and create a new folder/directory named Updates.

The default path for PowerChute on a Windows system is:

C:\Program Files\APC\PowerChute for PowerChute Network Shutdown

C:\Program Files\APC\PowerChute Serial Shutdown for PowerChute Serial Shutdown

On Linux, the default path is:

/opt/APC/PowerChute for PowerChute Network Shutdown

/opt/APC/PowerChuteSerialShutdown for PowerChute Serial Shutdown

2 - Copy the Windows .zip or Linux .gz file to Updates folder/directory created at step one.

3 - Log in to the PowerChute web UI and go to About and scroll down to the Java version information you will see the available Java update information. Click the Update java button then click OK.

PowerChute Network Shutdown

PowerChute Serial Shutdown

Released for: Schneider Electric Ireland