CyberSecBulletin

SPH Engineering vulnerabilities

We track 1 vulnerability in SPH Engineering products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest SPH Engineering vulnerabilities

  • 9.8 Critical severity

    UgCS: Improper Authentication

    CVE-2026-59104SPH Engineering

    UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin