gm_alex

Products

ProductCVEsExploitedLatest
User Access Manager3–Sep 9, 2026

Exploited and recent CVEs

  • CVE-2026-19797 Medium 6.1 User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter 0.4%
  • CVE-2026-15281 Medium 6.5 User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection 0.5%
  • CVE-2026-18352 High 7.5 User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter 1.0%