All vulnerabilities
CVE-2026-45449

Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Unitronics Unitronics UniStream Pro/UniLogic
Open in ThreatlineRecord JSON
CVSS
8.3High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.82%Chance of exploitation activity in the next 30 days, higher than 56% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published15 Oct 2026Updated 15 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.

This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

Text from CVE List

Affected versions 1

  • Unitronics UniStream Pro/UniLogicaffected: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329CVE List

References 1