Login Request a demo
AP
Product
apcupsd
by apcupsd · last CVE Sep 30, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 1
Severity
All severities5Critical1High1Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add apcupsd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-12585
9.8
5%
Jun 3
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php
Affected: 0.3.91_5
CVE-2026-103432
8.1
0%
Sep 30
apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to…
Affected: through 3.14.14
CVE-2019-12584
6.1
3%
Jun 3
Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php
Affected: 0.3.91_5
CVE-2026-103436
3.7
0%
Sep 30
apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi
Affected: through 3.14.14
CVE-2003-0098
–
5%
Mar 3
Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave…
Affected: before 3.8.6; 3.10.0 before 3.10.5
Showing 5