CVE-2019-18646

HIGH 7.2CVE-2019-18646 · Published 14/11/2019 · updated 17/06/2026

In short

CVE-2019-18646 is a HIGH (CVSS 7.2) vulnerability affecting ng firewall (untangle).
Chance of exploitation in the next 30 days (EPSS): 0.91%, higher than 60.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ng firewall untangle	`= 14.2.0`	No fix yet

Description

The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user.

References

gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145 · Third Party Advisory

More vulnerabilities in ng firewall

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free