CVE-2026-103432

Summary

The flaw is a stack-based buffer overflow in the getupsvar() function of apcupsd, which can lead to arbitrary code execution. This matters because it allows an attacker to exploit the vulnerability to gain control over the system.

Exploitability

Exploitation is relatively easy given the high CVSS score, and requires access to the affected web interfaces (upsstats.cgi, multimon.cgi, upsfstats.cgi).

Blast radius

If exploited, the impact could be severe, potentially leading to complete system compromise and loss of sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to apcupsd 3.14.14 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.