CVE-2019-18649: Untangle NG Firewall

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.

Affected products

• Untangle NG Firewall: version 14.2.0 only

Published 2019-11-14. Last modified 2026-06-17.