Skip to content
OpenAdvisories

Vendor

networkupstools

3 known vulnerabilities.

Products

nut 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-54161 Public exploit

    upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution

    Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed…

    networkupstools nut nut nut Debian Ubuntu
  • High 8.2
    CVE-2026-54160

    Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN

    Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks st…

    networkupstools nut