AP
Vendor
apcupsd
6
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103436 | AP apcupsd apcupsd | 3.7 | Sep 30 | apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi |
| CVE-2026-103432 | AP apcupsd apcupsd | 8.1 | Sep 30 | apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to… |
| CVE-2019-12585 | AP Apcupsd Apcupsd | 9.8 | Jun 3 | Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsd_status.php |
| CVE-2019-12584 | AP Apcupsd Apcupsd | 6.1 | Jun 3 | Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php |
| CVE-2017-7884 | AU Apc Ups Daemon Apcupsd | 8.4 | Jun 16 | In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with… |
| CVE-2003-0098 | AP Apcupsd Apcupsd | – | Mar 3 | Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave… |