Skip to content
OpenAdvisories

Product · UTMStack

UTMStack

7 known vulnerabilities.

All Critical High Medium Low Exploited only

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-82045

    UTMStack < 11.2.16 JPQL Injection via searchPropertyValues

    UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary entity data by exploiting UtmNetworkScanService.searchPropertyValues(), which builds a JPQL query with String.format() and executes it via em…

    UTMStack UTMStack
  • Medium 5.3
    CVE-2026-82043

    UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint

    UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can su…

    UTMStack UTMStack
  • Medium 5.0
    CVE-2026-82040

    UTMStack < 11.2.16 SSRF via IdentityProviderService

    UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl() that allows authenticated attackers to make the server send requests to arbitrary internal or cloud metadata hosts by supplying a mal…

    UTMStack UTMStack