Fluid Attacks Database

Description

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version
debian 13	apcupsd	=3.14.14-5 \|\| =3.14.14-6 \|\| =3.14.14-7
debian 14	apcupsd	=3.14.14-5 \|\| =3.14.14-6 \|\| =3.14.14-7
debian 12	apcupsd	=3.14.14-3.1 \|\| =3.14.14-4 \|\| =3.14.14-5 \|\| =3.14.14-6 \|\| =3.14.14-7

Aliases

1. CVE-2026-1034322. NVD-2026-1034323. OSV-DEBIAN-2026-1034324. OSV-2026-1034325. SECURITY-TRACKER-CVE-2026-103432

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.