Unitronics vulnerabilities
We track 7 vulnerabilities in Unitronics products across 21 products. 7 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 15, 2026.
Latest Unitronics vulnerabilities
- 8.3 High severity
Unitronics UniStream Pro/UniLogic: Use of Externally-Controlled Format String
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
- 8.3 High severity
Unitronics UniStream Pro/UniLogic: Improper Authentication
: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
- 8.3 High severity
Unitronics UniStream Pro/UniLogic: Improper Restriction of Operations within the Bounds of a Memory Buffer
: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic version
- 8.3 High severity
Unitronics UniStream Pro/UniLogic: Improper Neutralization of Special Elements used in an OS Command
: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10)
- 8.8 High severity
Unistream Unilogic: Exposure of Sensitive Information to an Unauthorized Actor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices
- 9.8 Critical severity
Unitronics Vision PLC and HMI Insecure Default Password Exploited
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
- 9.8 Critical severity
Vision1210: Embedded Malicious Code
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a