CVE-2020-7526

—

CVSS 3.1

8.8 high

EPSS

2%p82

Published

Aug 31, 2020 (Aug 31, 2020)

Modified

Jun 17, 2026

Description

Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution when a script is executed during a shutdown event.

Vendors: apc
Products: powerchute
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.