Unitronics UniStream Pro and UniLogic Face High-Severity Auth Flaw

Unitronics industrial automation software contains a high-severity authentication flaw. The vulnerability affects specific UniStream Pro versions and older UniLogic builds, posing risks to industrial control systems.

What happened

The National Vulnerability Database lists CVE-2026-45451 as a high-severity issue. It involves improper authentication within Unitronics UniStream Pro and UniLogic products. The flaw is categorized under CWE-287 for authentication failures. Security researchers have assigned it a CVSS score of 8.3. This rating reflects the severity level defined by the NVD record. The weakness is described simply as an improper authentication vulnerability.

Affected versions include Unitronics UniStream Pro B10 and C10 releases. Additionally, UniLogic versions prior to 1.41.329 are vulnerable to this attack vector. The NVD record specifies that only these particular UniStream Pro versions are impacted. The source material does not mention the status of newer UniLogic builds. No further details on the technical mechanics are provided in the record.

Why it matters

Industrial control systems often operate with minimal network segmentation. An authentication flaw in such environments can lead to direct system compromise. Attackers could potentially manipulate machine operations or steal sensitive process data. The high CVSS score indicates a significant risk to availability and confidentiality. Organizations relying on these Unitronics products must assess their exposure. Failure to address the flaw could result in operational disruption. The source material does not comment on vendor guidance urgency.

What to watch

• Monitor vendor communications for official patch releases.
• Check network logs for unauthorized access attempts to affected systems.
• Verify current software versions against the affected list.
• Watch for new threat intelligence related to industrial control systems.

Who needs to act first

Teams should prioritize systems exposed to untrusted networks. Isolate vulnerable controllers from general IT infrastructure immediately. Implement strict network segmentation to limit lateral movement. Update access controls and monitor for unusual login patterns. Test any potential mitigations in a non-production environment first. Ensure backups are current before making configuration changes. Coordinate with engineering teams to verify operational safety.

Background: CVSS score

The CVSS score explains vulnerability severity using a 0.0 to 10.0 scale. It measures attack vector, complexity, privileges required, and impact on confidentiality, integrity, and availability. You use this metric to prioritize patches, though you must adjust it for your specific environment to avoid wasting time on irrelevant threats.

Read the full guide: CVSS Score Explained: How to Read Risk Metrics and Prioritize Fixes

What to do and how to stay safe: Unitronics

• Audit all Unitronics UniStream Pro and UniLogic installations for affected versions.
• Restrict network access to these systems using firewalls and VLANs.
• Enable detailed logging to detect potential unauthorized authentication attempts.
• Prepare an incident response plan specific to industrial control system compromises.

Step-by-step guide: Virtual Patching Myths: What It Actually Fixes and Breaks

General security guidance from the Patch Gazette newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which Unitronics products are affected by CVE-2026-45451?

Unitronics UniStream Pro B10 and C10 versions, and UniLogic versions prior to 1.41.329.

What is the severity of this vulnerability?

It is rated HIGH with a CVSS score of 8.3.

Is there a patch available yet?

No fix has been confirmed in the source material.