CVE-2026-103436

The apcupsd software, versions through 3.14.14 , contains a vulnerability in the getupsvar() function located in src/cgi/upsfetch.c . This component is utilized by upsstats.cgi , multimon.cgi , and upsfstats.cgi . The root cause is an improper use of sscanf ; when a matched STATUS line contains f...