unopim

3 known vulnerabilities in unopim, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102630 CVSS 2.3 low UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation…
  • CVE-2026-85395 CVSS 7.1 high UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to…
  • CVE-2026-82524 CVSS 8.6 high UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP…