CVE-2026-82041 | UTMStack up to 11.2.15 Command Processing UTMIncidentCommandWebsocket.processCommand improper authorization

October 2, 2026 Yanac

A vulnerability described as very critical has been identified in UTMStack up to 11.2.15. The impacted element is the function UTMIncidentCommandWebsocket.processCommand of the component Command Processing. Such manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-82041. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More