What’s Vulnerable › Vulnerabilities

CVE-2026-57895

• Severity: high (CVSS 8.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-08 · updated 2026-10-25
• Weakness: CWE-276

Description

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege

Affected products

• Fuji Electric Co.,Ltd. Pupsman: before 3.9.0

References

• https://jvn.jp/en/jp/JVN62347140/
• https://www.fujielectric.co.jp/products/power_supply/ups/product_detail/software_pupsman.html

Get alerted when CVE-2026-57895 or the next vulnerability affects your stack