CVE-2019-18648: Untangle NG Firewall

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.

Affected products

• Untangle NG Firewall: version 14.2.0 only

Published 2019-11-14. Last modified 2026-06-17.