CVE-2026-22584 - AskarLabs CVE Database

CVE-2026-22584

Vendor Salesforce

Product Uni2TS

Weakness CWE-94 · Code injection

Published January 9, 2026

Last update January 12, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.

Key dates

02Disclosure timeline

January 9, 2026 CVE published

January 12, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-22584 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html