User Access Manager vulnerabilities | LiveThreat CVE Feed

Product

User Access Manager

by gm_alex · last CVE Sep 9, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 2Low 0

Severity

Exploitation

Watch

Add User Access Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-18352	7.5	1%	Aug 1	User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter Affected: through 2.3.15
CVE-2026-15281	6.5	0%	Aug 5	User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection Affected: through 2.3.12
CVE-2026-19797	6.1	0%	Sep 9	User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter Affected: through 2.3.18