Skip to content

Vendor

SPH Engineering vulnerabilities

1 published CVE affecting SPH Engineering, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of SPH Engineering alerts

Products

Latest SPH Engineering CVEs

Newest publication first

  1. CVE-2026-59104 UgCS server HCI authentication bypass with empty credentials

    Published
    CriticalCVSS 9.3

    UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.