Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 44

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devic…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00834 Published 2026-06-12 Fixed in 5.1.15, 4.0.15 +1 CWE-20
Priority MEDIUM 43

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or in…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00303 Published 2026-06-12 Fixed in 5.1.15, 4.0.15 +1 CWE-20
TI-2026-34940 CVE-2026-47368 · GHSA-4wqw-89qw-8r56

Path traversal in Ubiquiti UniFi OS Server

Priority LOW 37

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00355 Published 2026-06-12 Fixed in 5.1.15, 4.0.15 +1 CWE-22
TI-2026-35956 CVE-2026-48610 · GHSA-x48g-g9fg-6pfc

Improper access control in Ubiquiti UDM

Priority LOW 37

Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi O…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00264 Published 2026-06-12 Fixed in 5.1.15 CWE-284