CVE-2026-45449 - Vulnerability Details - OpenCVE

: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.

This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

Upgrade UniLogic and UniStream to version 1.41.329 or above

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

History

Thu, 15 Oct 2026 19:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 15 Oct 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description		: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Title		Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Weaknesses		CWE-78
References		https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0
Metrics		cvssV3_1 `{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: INCD

Published: 2026-10-15T15:18:59.438Z

Updated: 2026-10-15T18:06:03.223Z

Reserved: 2026-05-12T15:11:23.921Z

Link: CVE-2026-45449

Vulnrichment

Updated: 2026-10-15T18:05:57.235Z

NVD

Status : Received

Published: 2026-10-15T16:18:10.993

Modified: 2026-10-15T19:17:38.797

Link: CVE-2026-45449

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-78

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45449", "assignerOrgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "state": "PUBLISHED", "assignerShortName": "INCD", "dateReserved": "2026-05-12T15:11:23.921Z", "datePublished": "2026-10-15T15:18:59.438Z", "dateUpdated": "2026-10-15T18:06:03.223Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "shortName": "INCD", "dateUpdated": "2026-10-15T15:18:59.438Z"}, "title": "Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "datePublic": "2026-10-15T15:13:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "affected": [{"vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "versions": [{"status": "affected", "version": "Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": ": Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.", "supportingMedia": [{"type": "text/html", "base64": false, "value": ": Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.<p>This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.</p>"}]}], "references": [{"url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW", "baseSeverity": "HIGH", "baseScore": 8.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L"}}], "solutions": [{"lang": "en", "value": "Upgrade UniLogic and UniStream to version 1.41.329 or above", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table>\n \n <tbody><tr>\n\n <td>Upgrade UniLogic and UniStream to version 1.41.329 or above</td>\n\n </tr>\n</tbody></table>"}]}], "credits": [{"lang": "en", "value": "SemanticGuard", "type": "finder"}], "source": {"advisory": "ILVN-2025-0261", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-15T18:05:49.669716Z", "id": "CVE-2026-45449", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T18:06:03.223Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-45449", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T18:05:49.669716Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T18:05:57.235Z"}}], "cna": {"title": "Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "source": {"advisory": "ILVN-2025-0261", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "SemanticGuard"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "versions": [{"status": "affected", "version": "Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade UniLogic and UniStream to version 1.41.329 or above", "supportingMedia": [{"type": "text/html", "value": "<table>\n \n <tbody><tr>\n\n <td>Upgrade UniLogic and UniStream to version 1.41.329 or above</td>\n\n </tr>\n</tbody></table>", "base64": false}]}], "datePublic": "2026-10-15T15:13:00.000Z", "references": [{"url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": ": Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.", "supportingMedia": [{"type": "text/html", "value": ": Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.<p>This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) \u2013 UniLogic versions prior to 1.41.329.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "shortName": "INCD", "dateUpdated": "2026-10-15T15:18:59.438Z"}}}, "cveMetadata": {"cveId": "CVE-2026-45449", "state": "PUBLISHED", "dateUpdated": "2026-10-15T18:06:03.223Z", "dateReserved": "2026-05-12T15:11:23.921Z", "assignerOrgId": "a57ee1ae-c9c1-4f40-aa7b-cf10760fde3f", "datePublished": "2026-10-15T15:18:59.438Z", "assignerShortName": "INCD"}, "dataVersion": "5.2"}