Skip to content
OpenAdvisories

Vendor

UTMStack

7 known vulnerabilities.

Products

UTMStack 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-82044

    UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdf

    UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf() method exposed v…

    UTMStack UTMStack
  • High 8.8
    CVE-2026-82039

    UTMStack < 11.2.16 SQL Injection via searchGroupsByFilter

    UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject arbitrary SQL by supplying malicious assetType and groupName values that are inserted unsanitized into a …

    UTMStack UTMStack