networkupstools nut

• CVE-2026-85068 Low 2.4 NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg 0.2%
• CVE-2026-54161 High 8.1 upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution 0.6%
• CVE-2026-54160 High 8.2 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN 0.2%