CVE-2026-45452: Unitronics - CWE-134 Use of Externally-Controlled format string
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.
This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Unitronics UniStream Pro/UniLogicto a version that resolves this vulnerability.Fixed in 1.42.220
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects Unitronics UniStream Pro B10 and C10 deployments using UniLogic versions prior to 1.41.329.
What level of access does an attacker need?
The vector indicates network reachability, low attack complexity, no user interaction, and low privileges required. An attacker must therefore already have low-level privileges on a reachable affected target.
What is the remediation target?
Upgrade UniLogic to version 1.41.329 or later. The provided data identifies versions prior to 1.41.329 as affected.