CVE-2018-17431: Comodo Unified Threat Management Firewall

Critical severity, CVSS 9.8. EPSS: 83.9% chance of exploitation in the next 30 days.

Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.

Affected products

• Comodo Unified Threat Management Firewall: before 2.7.0 (fixed in 2.7.0)

Published 2019-01-30. Last modified 2026-06-17.