CVE-2026-22584: Salesforce UNI2TS

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.

Affected products

• Salesforce UNI2TS: before 2.0.0 (fixed in 2.0.0)

Published 2026-01-09. Last modified 2026-06-17.