CVE-2026-103436Published
apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi. On the single-field path, when the matched STATUS line has fewer than three whitespace…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-103436 · Microsoft / collected KEV context
cve-program · CVE-2026-103436
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.