CVE-2026-45450

8.3High

Published 15 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

8.3High

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: High impact on confidentiality, integrity
Weakness: CWE-119

Impact

Authenticated network attackers can corrupt memory to execute code, compromise device integrity, or trigger a denial of service. They require network access to the device and low-privilege credentials.

Root cause

Improper restriction of operations within the bounds of a memory buffer leads to memory corruption.

Affected systems

Unitronics UniStream Pro (B10 / C10) running UniLogic versions prior to 1.41.329

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Fix & remediation

Upgrade UniLogic to version 1.41.329 or later. If upgrading immediately is not possible, restrict network access to the UniStream Pro management interfaces to trusted IP addresses only.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

References

https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

Source: nvd.nist.gov/vuln/detail/CVE-2026-45450