CVE-2026-103432CWE-121

CVE-2026-103432

High · published September 30, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-09-30T20:17Z
References (3)
https://bugzilla.redhat.com/show_bug.cgi?id=2493140 · [email protected]https://github.com/therealbstern/apcupsd/blob/224d19d5faa508d04267f6135fe53d50800550de/src/cgi/upsfetch.c#L240 · [email protected]https://sourceforge.net/projects/apcupsd/ · [email protected]
EPSS history
Timeline
  • 02 OCT 03:41Z
    EPSS moved — → 1%
    epss
  • 30 SEP 15:31Z
    apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi)…
    cvelistv5