CVE-2026-45452
HighCVSS 8.3Summary
Unitronics UniStream Pro (B10/C10) with UniLogic before version 1.41.329 contains a use of externally-controlled format string vulnerability. This may lead to unexpected behavior or code execution.
Risk Assessment
The vulnerability may allow an attacker to manipulate the format string, potentially leading to code execution or system crash, compromising confidentiality, integrity, and availability.
Recommendation
Update UniLogic to version 1.41.329 or later. Restrict network access to Unitronics devices.
Other vulnerabilities in Unitronics UniStream Pro/UniLogic
See all- CVE-2026-45451High
Unitronics UniStream Pro (B10/C10) with UniLogic before version 1.41.329 contains an improper authentication vulnerability. This may allow bypassing authentication mechanisms.
- CVE-2026-45450High
Unitronics UniStream Pro (B10/C10) with UniLogic before version 1.41.329 contains an improper restriction of operations within the bounds of a memory buffer vulnerability. This may lead to buffer overflow and code execution.
- CVE-2026-45449High
Unitronics UniStream Pro (B10/C10) with UniLogic before version 1.41.329 contains an improper neutralization of special elements used in an OS command (OS command injection) vulnerability. This may allow execution of arbitrary commands.
Original NVD description (English source)
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS