CVE-2026-103432

Name of the Vulnerable Software and Affected Versions apcupsd versions prior to 3.14.15

Description A stack-based buffer overflow occurs in the getupsvar() function within the src/cgi/upsfetch.c file. This issue is triggered by the sscanf function and affects the upsstats.cgi, multimon.cgi, and upsfstats.cgi components. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to memory corruption.

Recommendations Update apcupsd to version 3.14.15 or later.