Read the docs

Umami Software application

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Umami Software application records in CISA KEV

No Umami Software application vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-03757 CVE-2026-4317 · GHSA-r66v-9cpq-347q

SQL inyection in Umami Software application

Priority MEDIUM 42

SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically,…

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.00328 Published 2026-03-31 No fix listed CWE-89
Open these records in search →