NT-ware vulnerabilities
Published CVEs affecting NT-ware products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-92378
Medium · 4.1
CWE-613 Sep 23, 2026
uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login
A session management
vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware
uniFLOW Online. Under specific timing conditions during Service Offline
Emergency Mode, a previously authenticated session may be retained after
logout, which could allow a subsequent user to be authenticated as the previous
user and gain unauthorised limited access to device functionality.
CVE-2026-1433
Medium · 4.8
CWE-522 Jul 6, 2026
uniFLOW Universal Login Manager (ULM) Standalone Improper Protection of Sensitive Information Leads to Information Disclosure
uniFLOW Universal Login Manager (ULM) Standalone
contains an information disclosure vulnerability that may allow an
authenticated administrator to access sensitive configuration information
through the ULM Remote User Interface (RUI). Exploitation requires
administrative privileges and may disclose configuration data associated with
SMTP or LDAP integrations. ULM deployments connected to uniFLOW Server or
uniFLOW Online are not affected.