CVEvulnerability

CVE-2026-103432

8.1 HIGH Published 2026-09-30 Modified 2026-09-30 Official page ↗

Status: Deferred
Published: 2026-09-30
Last modified: 2026-09-30
Assigner: [email protected]
CVSS 3.1 ([email protected]): 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-121

Description

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.

Weakness · CWE (1)

CWE-121 Stack-based Buffer Overflow weakness

References

https://bugzilla.redhat.com/show_bug.cgi?id=2493140 bugzilla.redhat.com
https://github.com/therealbstern/apcupsd/blob/224d19d5faa508d04267f6135fe53d50800550de/src/cgi/upsfetch.c#L240 github.com
https://sourceforge.net/projects/apcupsd/ sourceforge.net

CVE-2026-103432

Description

Related

Weakness · CWE (1)

References