CVE-2026-1433
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability in uniFLOW Universal Login Manager (ULM) Standalone allows an authenticated administrator to access sensitive configuration information via the RUI interface. The flaw affects SMTP and LDAP integration settings.
Risk Assessment
The risk involves potential leakage of credentials for SMTP and LDAP servers, which could enable further attacks on the organization's email and directory infrastructure.
Recommendation
Immediately update uniFLOW ULM Standalone to the latest version and restrict access to the RUI interface to trusted administrators only.
Original NVD description (English source)
uniFLOW Universal Login Manager (ULM) Standalone contains an information disclosure vulnerability that may allow an authenticated administrator to access sensitive configuration information through the ULM Remote User Interface (RUI). Exploitation requires administrative privileges and may disclose configuration data associated with SMTP or LDAP integrations. ULM deployments connected to uniFLOW Server or uniFLOW Online are not affected.