Tag

Cve-2026-82041

1 brief RSS

SQL Injection in UTMStack via UtmAssetGroupService

UTMStack versions prior to 11.2.16 are vulnerable to an authenticated SQL injection in the UtmAssetGroupService, allowing attackers to execute arbitrary commands with DBA privileges.

UTMStack sql-injection vulnerability web-application remote-code-execution cve-2026-82041 ssrf internal-reconnaissance

2r 5t 1c 6d ago