Release date

 

Reference

UCAAS-1586
ESPPP-1602

Criticality


CVSS Score-
Versions with the issue resolved
  • UCConnect since October 27, 2026
  • ProCall 8 Enterprise ≥ 8.11.0 since October, 26, 2026

  • ProCall Infinity (DataCenter) ≥ 2610.0 (8.9.3.12723)  since October 27, 2026 

Affected versions

This vulnerability affects the Node.js component of UCweb in ProCall.
(CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-106072, CVE-2026-105481)


Versions with bug fixes

  • UCConnect release dated 27 October 2026: The Node.js component of the UCConnect services has been updated to the latest version.
    This is a routine update to this component. 

  • ProCall 8 Enterprise 8.11.0 (Hotfix Released 26 October, 2026) 

  • ProCall Infinity 2610.0 (Released 27 October 2026)

End-of-life

Please note the following: If you are using older estos product versions that are no longer supported (End-of-Life has been reached), we strongly recommend updating your software to the current versions for security reasons.
This is because security patches are only regularly developed and made available for current software versions.