A malicious actor who lures an authenticated user to a malicious page could exploit a…
Priority LOW 34CWE-942Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00271 19th percentileScored 2026-11-07
Fix Fixed UniFi OS Server (Ubiquiti Inc): 5.1.19Dream Machines (Ubiquiti Inc): 5.1.19+10 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Ubiquiti | UniFi OS Server | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Dream Machines | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Enterprise Fortress Gateway | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Dream Wall | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Dream Routers | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Express 7 | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Cloud Keys | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Network Video Recorders | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Enterprise Video Recorders | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Cloud Gateways | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Network Attached Storage | before 5.1.19 | 5.1.19 | Patch available | CNA |
| Ubiquiti | Enterprise Firewall Core | before 5.1.19 | 5.1.19 | Patch available | CNA |
- UniFi OS Server VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Dream Machines VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Enterprise Fortress Gateway VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Dream Wall VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Dream Routers VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Express 7 VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Cloud Keys VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Network Video Recorders VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Enterprise Video Recorders VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Cloud Gateways VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Network Attached Storage VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
- Enterprise Firewall Core VendorUbiquiti Affected before 5.1.19 Fixed in 5.1.19 Patch available CNA
CPE configurations NVD · 59
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ui:unifi_os_server:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_dream_machine_beast:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_dream_machine_special_edition:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_dream_machine_pro_max:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
- cpe:2.3:a:ui:unifi_os_server:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_dream_machine_beast:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_dream_machine_special_edition:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_dream_machine_pro_max:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
Show 49 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:ui:enterprise_fortress_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_dream_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_dream_wall_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_dream_wall:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_dream_router_7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_express_7_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_express_7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_cloudkey_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_cloudkey:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_cloud_key_plus:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_cloudkey_enterprise:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_network_video_recorder:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_network_video_recorder_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_network_video_recorder_instant:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:enterprise_network_video_recorder:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:enterprise_network_video_recorder_core:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_network_video_recorder_g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_network_video_recorder_g2_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_cloud_gateway_ultra:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_cloud_gateway_max:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_cloud_gateway_industrial:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:* | up to 5.1.15 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unifi_cloud_gateway_fiber:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unas_2_firmware:*:*:*:*:*:*:*:* | up to 5.1.16 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unas_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unas_4_firmware:*:*:*:*:*:*:*:* | up to 5.1.16 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unas_4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unas_pro_firmware:*:*:*:*:*:*:*:* | up to 5.1.16 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unas_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unas_pro_4_firmware:*:*:*:*:*:*:*:* | up to 5.1.16 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unas_pro_4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:unas_pro_8_firmware:*:*:*:*:*:*:*:* | up to 5.1.16 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:unas_pro_8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
| cpe:2.3:o:ui:enterprise_firewall_core_firmware:*:*:*:*:*:*:*:* | up to 5.1.18 | Vulnerable | Ubiquiti |
| cpe:2.3:h:ui:enterprise_firewall_core:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ubiquiti |
- cpe:2.3:h:ui:enterprise_fortress_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_dream_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_dream_wall_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_dream_wall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_dream_router_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_express_7_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_express_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_cloudkey_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_cloudkey:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_cloud_key_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_cloudkey_enterprise:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_network_video_recorder:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_network_video_recorder_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_network_video_recorder_instant:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:enterprise_network_video_recorder:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:enterprise_network_video_recorder_core:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_network_video_recorder_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_network_video_recorder_g2_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_cloud_gateway_ultra:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_cloud_gateway_max:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_cloud_gateway_industrial:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.15 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unifi_cloud_gateway_fiber:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unas_2_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.16 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unas_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unas_4_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.16 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unas_4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unas_pro_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.16 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unas_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unas_pro_4_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.16 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unas_pro_4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:unas_pro_8_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.16 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:unas_pro_8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
- cpe:2.3:o:ui:enterprise_firewall_core_firmware:*:*:*:*:*:*:*:* Versions up to 5.1.18 Vulnerable ·Ubiquiti
- cpe:2.3:h:ui:enterprise_firewall_core:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti
Remediation
- Fix · CNA UniFi OS Server (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Dream Machines (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Enterprise Fortress Gateway (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Dream Wall (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Dream Routers (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Express 7 (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Cloud Keys (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Network Video Recorders (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Enterprise Video Recorders (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Cloud Gateways (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Network Attached Storage (Ubiquiti Inc) Fixed in 5.1.19
- Fix · CNA Enterprise Firewall Core (Ubiquiti Inc) Fixed in 5.1.19
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Ubiquiti Cloud Gateways, Dream Machines and 2 more products 5.1.19
7 records Highest priority Priority MEDIUM 5 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-39278 Improper input validation in Ubiquiti UniFi OS ServerPriority MEDIUM 46
- TI-2026-39279 Path traversal in Ubiquiti UniFi OS ServerPriority MEDIUM 45
- TI-2026-39814 Improper access control in Ubiquiti Dream MachinesPriority MEDIUM 43
- Release ·
Ubiquiti Cloud Keys, Enterprise Video Recorders, Network Video Recorders 5.1.19
6 records Highest priority Priority MEDIUM 4 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-39278 Improper input validation in Ubiquiti UniFi OS ServerPriority MEDIUM 46
- TI-2026-39279 Path traversal in Ubiquiti UniFi OS ServerPriority MEDIUM 45
- TI-2026-39280 SQL injection in Ubiquiti UniFi OS ServerPriority MEDIUM 41
Show 2 more groups
- Release ·
Ubiquiti Enterprise Firewall Core, Enterprise Fortress Gateway, Express 7 5.1.19
6 records Highest priority Priority MEDIUM 4 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-39278 Improper input validation in Ubiquiti UniFi OS ServerPriority MEDIUM 46
- TI-2026-39279 Path traversal in Ubiquiti UniFi OS ServerPriority MEDIUM 45
- TI-2026-39814 Improper access control in Ubiquiti Dream MachinesPriority MEDIUM 43
- Release ·
Ubiquiti Network Attached Storage, UniFi OS Server 5.1.19
5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2026-39278 Improper input validation in Ubiquiti UniFi OS ServerPriority MEDIUM 46
- TI-2026-39279 Path traversal in Ubiquiti UniFi OS ServerPriority MEDIUM 45
- TI-2026-39280 SQL injection in Ubiquiti UniFi OS ServerPriority MEDIUM 41
Timeline
- 2026-10-02 Threatist record created from CVE-2026-55110
- 2026-10-03 Alias added: GHSA-fwmw-87x4-wjv5
References
More Ubiquiti Enterprise Firewall Core Firmware vulnerabilities
- TI-2026-39278 Improper input validation in Ubiquiti UniFi OS Server CVSS 3.1CRITICAL 9.9
- TI-2026-39279 Path traversal in Ubiquiti UniFi OS Server CVSS 3.1HIGH 8.6
- TI-2026-39280 SQL injection in Ubiquiti UniFi OS Server CVSS 3.1HIGH 8.8
- TI-2026-39277 Server-side request forgery in Ubiquiti UniFi OS Server CVSS 3.1HIGH 8.8
Sources
- CVE-2026-55110 · CVE Program
- CVE-2026-55110 · NVD
- FIRST EPSS
- GHSA-fwmw-87x4-wjv5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences