CVE-2026-45449: Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.
This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Unitronics UniStream Pro/UniLogicto a version that resolves this vulnerability.Fixed in 1.41.329
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects Unitronics UniStream Pro B10 and C10 deployments using UniLogic versions earlier than 1.41.329.
What level of access does an attacker need?
The CVSS vector indicates that exploitation is network-reachable, requires low attack complexity, needs low privileges, and does not require user interaction.
What could successful exploitation impact?
The reported CVSS vector indicates high confidentiality and integrity impact, with low availability impact.