Login Request a demo
UA
Product
User Access Manager
by gm_alex · last CVE Sep 9, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add User Access Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-15281
6.5
0%
Aug 5
User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection
Affected: through 2.3.12
CVE-2026-19797
6.1
0%
Sep 9
User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter
Affected: through 2.3.18
Showing 2