CVE-2026-45452 PUBLISHED

Unitronics - CWE-134 Use of Externally-Controlled format string

Assigner: INCD
Reserved: 12.05.2026 Published: 15.10.2026 Updated: 15.10.2026

Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.

This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS Score: 8.3

Product Status

Vendor Unitronics
Product Unitronics UniStream Pro/UniLogic
Versions Default: unaffected
  • Version Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329 is affected

Solutions

Upgrade UniLogic and UniStream to version 1.42.220 or above

Credits

  • SemanticGuard finder

References

Problem Types

  • CWE-134 Use of Externally-Controlled format string CWE