Skip to content

Product

SPH Engineering UgCS vulnerabilities

1 published CVE affecting SPH Engineering UgCS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest SPH Engineering UgCS CVEs

Newest publication first

  1. CVE-2026-59104 UgCS server HCI authentication bypass with empty credentials

    Published
    CriticalCVSS 9.3 EPSS 0.66%

    UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.