Skip to content
OpenAdvisories

Package · Debian

nut

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-54161 Public exploit

    upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution

    Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed…

    networkupstools nut nut nut Debian Ubuntu