Externally-Controlled Format String Vulnerability in Unitronics UniStream Pro and UniLogic
CVE-2026-45452

8.3HIGH

Key Information:

Vendor

Unitronics

Status
Unitronics Unistream Pro/unilogic
Vendor
CVE Published:
15 October 2026

What is CVE-2026-45452?

An externally-controlled format string vulnerability has been identified in Unitronics UniStream Pro and UniLogic products. This flaw permits attackers to manipulate the format string parameters, potentially leading to unauthorized access or execution of arbitrary code. The affected versions include Unitronics UniStream Pro models B10 and C10, as well as UniLogic software versions earlier than 1.41.329. It is crucial for users of these products to apply necessary updates and patches to mitigate risks associated with this vulnerability.

Affected Version(s)

Unitronics UniStream Pro/UniLogic Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329

References

https://www.gov.il/en/departments/dynamiccollectors/cve_a...

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SemanticGuard
.