UgCS vulnerabilities

1 known vulnerability in UgCS from SPH Engineering. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  UgCS: Improper Authentication

  CVE-2026-59104Nov 6, 2026SPH Engineering

  UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin