{"id":"EM-20261106-ET8C","url":"https://cyber.eventmonitor.net/incident/EM-20261106-ET8C/critical-ugcs-vulnerability-cve-2026-59104/","type":"cve","title":"Critical UgCS Vulnerability (CVE-2026-59104)","subtitle":"CVE-2026-59104","subject":"CVE-2026-59104","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-06T22:17:59.043Z","firstSignal":"2026-11-06T21:41:49.000Z","lastSignal":"2026-11-06T22:17:59.043Z","updated":"2026-11-06T23:42:12.627Z","revision":1,"life":[{"status":"Born","at":"2026-11-06T22:17:59.043Z","why":"second independent source: C6 NVD CVE API 2.0"},{"status":"Developing","at":"2026-11-06T22:17:59.043Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-06T21:41:49.000Z","what":"First signal: C8 EU Vulnerability Database (EUVD)"},{"at":"2026-11-06T22:17:59.043Z","what":"Born: second source, C6 NVD CVE API 2.0. Page EM-20261106-ET8C created."}],"stages":[{"name":"Disclosed","at":"2026-11-06T22:17:59.043Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-06T22:17:59.043Z","detail":"CVSS 9.3"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-06T21:41:49.000Z","source":"C8","sourceName":"EU Vulnerability Database (EUVD)","role":"Database","severity":4,"title":"EUVD-2026-118522 / CVE-2026-59104 (score 9.3)","text":"UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fields is…","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-118522"},{"at":"2026-11-06T22:17:59.043Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-59104 (CVSS 9.3)","text":"UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fields is interpreted as \\\"use the only user\\\" rather than as invalid credentials, and the server returns a fully authenticated session. Because the service listens on all interfaces (0.0.0.0) without TLS by default, an unauthenticated remote attacker with network access to port 3334 can obtain an authenticated session…","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59104"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-06T22:17:59.043","score":9.3,"severity":"CRITICAL","desc":"UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database contains exactly one user (the default single-operator installation), a LoginRequest with empty userLogin and userPassword fields is…","product":"","seen":1794008532627},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}