UTMStack

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilterCVE-2026-82042UTMStack · CVSS 9.8 · 0.5% likely

   CWE-306

2. UTMStack < 11.2.16 Missing Authorization via Command WebSocketCVE-2026-82041UTMStack · CVSS 9.9 · 0.4% likely

   CWE-862

3. UTMStack < 11.2.16 SQL Injection via searchGroupsByFilterCVE-2026-82039UTMStack · CVSS 8.8 · 0.3% likely

   CWE-89

4. UTMStack < 11.2.16 JPQL Injection via searchPropertyValuesCVE-2026-82045UTMStack · CVSS 6.5 · 0.3% likely

   CWE-89

5. UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdfCVE-2026-82044UTMStack · CVSS 7.7 · 0.3% likely

   CWE-918

6. UTMStack < 11.2.16 Account Enumeration via Password Reset EndpointCVE-2026-82043UTMStack · CVSS 5.3 · 0.2% likely

   CWE-204

7. UTMStack < 11.2.16 SSRF via IdentityProviderServiceCVE-2026-82040UTMStack · CVSS 5 · 0.2% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.