P5 Verified
UTMStack < 11.2.16 Missing Authorization via Command WebSocket
CVE-2026-82041. EPSS 0.00439 (percentile 0.35936), scored 2026-10-03. Fixed version: a310ff00d4f699cf0ae687573f43b69ad9906cdb. Fixed version: 4e7a727c3b8d8e2ad020d3b4f982a6d085dbecdd.
- CVE / CWE
- CVE-2026-82041 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.1
- CVSS
- Unavailable · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H · osv
- EPSS
- 0.00439 · percentile 0.35936 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: a310ff00d4f699cf0ae687573f43b69ad9906cdb
- Product unavailable · Fixed version: 4e7a727c3b8d8e2ad020d3b4f982a6d085dbecdd
Provenance
- OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-82041.html