CVE-2026-45452
Received
Received - Intake
Format String Vulnerability in Unitronics UniStream Pro/UniLogic
Vulnerability report for CVE-2026-45452, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-15
Last updated on: 2026-10-15
Assigner: Israel National Cyber Directorate
Description
Description
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.
This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) β UniLogic versions prior to 1.41.329.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Unitronics | Unitronics | UniStream Pro/UniLogic Unitronics UniStream Pro versions only (B10 / C10) β UniLogic versions prior to 1.41.329 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-134 | The product uses a function that accepts a format string as an argument, but the format string originates from an external source. |