Network UPS Tools nut prior 2.8.6 ippon_subdriver drivers/blazer_usb.c ippon_command uninitialized pointer

Summaryinfo

A vulnerability, which was classified as problematic, was found in Network UPS Tools nut. Affected by this vulnerability is the function ippon_command of the file drivers/blazer_usb.c of the component ippon_subdriver. The manipulation results in uninitialized pointer. This vulnerability is identified as CVE-2026-85068. The attack is only possible with local access. There is not any exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Network UPS Tools nut. Affected is the function ippon_command of the file drivers/blazer_usb.c of the component ippon_subdriver. The manipulation with an unknown input leads to a uninitialized pointer vulnerability. CWE is classifying the issue as CWE-824. The product accesses or uses a pointer that has not been initialized. This is going to have an impact on confidentiality. CVE summarizes:

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.4.2 through 2.8.5, ippon_command in drivers/blazer_usb.c partially initializes char tmp[64] with a short Megatec status query and then passes a fixed eight-byte chunk to usb_control_msg. A malicious firmware-controlled USB device presenting the Mustek Powermust VID 0x06da and Mustek Powermust PID 0x0003 matches blazer_usb_id, selects ippon_subdriver, and can receive the uninitialized trailing stack bytes during normal polling. The disclosure is bounded and read-only, requires physical or supply-chain access to the USB bus, and has no established integrity or availability impact. This issue is scheduled to be fixed in version 2.8.6.

The advisory is available at github.com. This vulnerability is traded as CVE-2026-85068 since 09/02/2026. The exploitability is told to be easy. Local access is required to approach this attack. Technical details are known, but there is no available exploit.

Upgrading to version 2.8.6 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-117878). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Network UPS Tools

Name

• nut

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion