PowerChute is flagged a vulnerable to CVE-2026-49844
Issue:
PowerChute is flagged a vulnerable to CVE-2026-49844
Product:
PowerChute Serial Shutdown 1.5, 1.6
PowerChute Network Shutdown 5.2
Environment:
All supported operating systems.
Cause:
PowerChute Serial Shutdown 1.5 and 1.6 ship with Log4j versions less than version 2.25.5
PowerChute Network Shutdown 5.2 ships with Log4j versions less than version 2.25.5
Solution:
For PowerChute Serial Shutdown 1.5, 1.6 on Windows:
- Download the attached file PCSS_Log4j_Update.zip file
- Uncompress the file PCSS_Log4j_Update.zip
- Open a command prompt as an administrator
- Change directory to the PCSS_Log4j_Update.zip directory that was created when the zip file PCSS_Log4j_Update.zip was uncompressed.
- Run the command run_patch.cmd
The patch will remove the current log4j files and replace them with log4j version 2.26.1.
For PowerChute Network Shutdown 5.2 on Windows:
- Download the attached file PCNS5.2_log4j_update.zip file
- Uncompress the file PCNS5.2_log4j_update.zip
- Open a command prompt as an administrator
- Change directory to the PCSS5.2_log4j_update directory that was created when the zip file PCSS5.2_log4j_update.zip was uncompressed.
- Run the command run_patch.cmd
The patch will remove the current log4j files and replace them with log4j version 2.26.1.
NOTE: Files to update the PCSS 1.5, 1.6, and PCNS 5.2 log4j files on Linux OS will be added soon.