Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-39650UnitechPay (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39650 Missing Authorization vulnerability in Unitech Web UnitechPay unitechpay-paiements-mobile-money allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UnitechPay: from n/a through <= 1.0.2. EPSS 0.2%Vulnerability Unitech Web	CVE Database V5	2026-04-08
Medium	5.3	EPSS 0.7%	CVE-2025-5891Unitech pm2 · ReDoS Medium5.3EPSS 0.7%2025-06-09CVE Database V5CVE-2025-5891 A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. EPSS 0.7%Vulnerability Unitech	CVE Database V5	2025-06-09

Page 1 of 1