CVE-2020-7526: Apc Powerchute

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution when a script is executed during a shutdown event.

Affected products

• Apc Powerchute: before 9.1 (fixed in 9.1)

Published 2020-08-31. Last modified 2026-06-17.