CVE-2026-5057 is a denial-of-service vulnerability in the RpcProvider class of ATEN Unizon. The vulnerability arises because the RpcProvider does not require authentication before granting access to certain functions, enabling remote attackers to cause a denial-of-service condition. This vulnerability has a CVSS base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability. ATEN has released an update to remediate this vulnerability.

Remote attackers can exploit this vulnerability without authentication to cause a denial-of-service condition on affected ATEN Unizon installations, resulting in service disruption. There is no impact on confidentiality or integrity. No known exploits in the wild have been reported at this time.

ATEN has issued an official update to fix this vulnerability. Users should apply the vendor-provided patch or update as detailed in the advisory at https://www.aten.com/global/en/supportcenter/info/security-advisory/26/. No other mitigation steps are indicated by the vendor.