VYPR

Umami

by Umami

CVEs (1)

  • CVE-2026-121531MedNov 3, 2026
    risk 0.41cvss 6.3epss —

    A vulnerability has been found in Umami 3.3.x/3.4.0/3.4.1. This affects an unknown part of the file src/app/api/auth/login/route.ts of the component 2FA Policy Handler. The manipulation leads to use of single-factor authentication. It is possible to initiate the attack remotely.…