CVE-2026-45452 Unitronics - CWE-134 Use of Externally-Controlled format string
Attackers can exploit a format string vulnerability in Unitronics UniStream Pro/UniLogic to potentially execute code or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-45452?
CVE-2026-45452 is a high-severity vulnerability in Unitronics UniStream Pro/UniLogic, published on 15 Oct 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.
This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Weakness: CWE-134
Which versions are affected by CVE-2026-45452?
How do I fix CVE-2026-45452?
No fix has been published for CVE-2026-45452 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-45452 being exploited?
There is no known exploitation of CVE-2026-45452 in the wild and no public exploit code.
Sources
Also known as GHSA-2hvg-pr2c-jr6f.