PatchTheCVEunizon vulnerabilities and fixes
Recent CVEs affecting unizon, with upgrade or downgrade steps. 6 tracked.
unizon has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-06-24. Highest priority: CVE-2026-9776 (score 51/100).
- CVE-2026-9776 HIGH 7.5 UPGRADE ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability
- CVE-2026-9777 HIGH 7.2 UPGRADE ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability
- CVE-2026-9778 HIGH 7.2 UPGRADE ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability
- CVE-2026-9774 MEDIUM 6.5 UPGRADE ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2026-9775 MEDIUM 6.5 UPGRADE ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2026-9779 HIGH 7.2 UPGRADE ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vuln
FAQ
How do I fix unizon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unizon being exploited right now?
None of the tracked unizon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unizon CVE should I patch first?
CVE-2026-9776 currently ranks highest (51/100): ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability.