Skip to content
Threat Feed
Subscribe

Product

UTMStack (< 11.2.16)

1 brief RSS
critical advisory

SQL Injection in UTMStack via UtmAssetGroupService

UTMStack versions prior to 11.2.16 are vulnerable to an authenticated SQL injection in the UtmAssetGroupService, allowing attackers to execute arbitrary commands with DBA privileges.

UTMStack sql-injection vulnerability web-application remote-code-execution cve-2026-82041 ssrf internal-reconnaissance
2r 5t 1c