TI-2015-07644 CVE-2015-9266 · GHSA-8gj2-cpjj-73rfUbiquiti airOS HTTP(S) unauthenticated arbitrary file uploadPriority HIGH 80The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.73999 · Published 2018-09-05 · No fix listed CWE-22