Skip to content

Vendor

Umami Software application vulnerabilities

1 published CVE affecting Umami Software application, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of Umami Software application alerts

Products

Latest Umami Software application CVEs

Newest publication first

  1. CVE-2026-4317 SQL inyection in Umami Software application

    Published
    CriticalCVSS 9.3

    SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically, they could manipulate the value of the 'timezone' request pa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.