CVE-2026-103436
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi. On the single-field path, when the matched STATUS line has fewer than three whitespace-separated tokens, sscanf("%*s %*s %s", answer) performs no assignment but the function returns success, and thus the caller prints the uninitialized destination buffer into the HTTP response.
| CWE | CWE-457 |
| Vendor | apcupsd |
| Product | apcupsd |
| Published | Sep 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for apcupsd apcupsd
Be the first to know when new low vulnerabilities affecting apcupsd apcupsd are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
apcupsd / apcupsd
0 ≤ 3.14.14