gm_alex
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| User Access Manager | 3 | – | Sep 9, 2026 |
Exploited and recent CVEs
- CVE-2026-19797 User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter 0.4%
- CVE-2026-15281 User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection 0.5%
- CVE-2026-18352 User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter 1.0%