CVE-2026-59104 | SPH Engineering UgCS up to 6.1 Login LoginHandler userLogin/userPassword improper authentication

November 7, 2026 Yanac

A vulnerability marked as critical has been reported in SPH Engineering UgCS up to 6.1. The affected element is the function LoginHandler of the component Login Handler. This manipulation of the argument userLogin/userPassword causes improper authentication.

This vulnerability appears as CVE-2026-59104. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More