IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.7Hoch

CVE-2026-34911

Ubiquiti Inc UniFi OS Server; Ubiquiti Inc UDM; Ubiquiti Inc UDM-Pro; Ubiquiti Inc UDM-SE Veröffentlicht: (vor 5 Monaten)

Beschreibung

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.

Schwachstellentyp (CWE): CWE-22

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Ubiquiti Inc EFG < 5.1.12
Ubiquiti Inc ENVR < 5.1.12
Ubiquiti Inc ENVR-Core < 5.1.12
Ubiquiti Inc Express 7 < 5.1.12
Ubiquiti Inc UCG-Fiber < 5.1.12
Ubiquiti Inc UCG-Industrial < 5.1.12
Ubiquiti Inc UCG-Max < 5.1.12
Ubiquiti Inc UCG-Ultra < 5.1.12
Ubiquiti Inc UCK < 5.1.12
Ubiquiti Inc UCK-Enterprise < 5.1.12
Ubiquiti Inc UCKP < 5.1.12
Ubiquiti Inc UDM < 5.1.12
Ubiquiti Inc UDM-Beast < 5.1.11
Ubiquiti Inc UDM-Pro < 5.1.12
Ubiquiti Inc UDM-Pro-Max < 5.1.12
Ubiquiti Inc UDM-SE < 5.1.12
Ubiquiti Inc UDR < 5.1.12
Ubiquiti Inc UDR-5G < 5.1.12
Ubiquiti Inc UDR7 < 5.1.12
Ubiquiti Inc UDW < 5.1.12
Ubiquiti Inc UNAS-2 < 5.1.10
Ubiquiti Inc UNAS-4 < 5.1.10
Ubiquiti Inc UNAS-Pro < 5.1.10
Ubiquiti Inc UNAS-Pro-4 < 5.1.10
Ubiquiti Inc UNAS-Pro-8 < 5.1.10
Ubiquiti Inc UniFi OS Server < 5.0.8
Ubiquiti Inc UNVR < 5.1.12
Ubiquiti Inc UNVR-G2 < 5.1.12
Ubiquiti Inc UNVR-G2-Pro < 5.1.12
Ubiquiti Inc UNVR-Instant < 5.1.12
Ubiquiti Inc UNVR-Pro < 5.1.12
ui enterprise fortress gateway firmware < 5.1.12
ui enterprise network video recorder core firmware < 5.1.12
ui enterprise network video recorder firmware < 5.1.12
ui unas 2 firmware < 5.1.10
ui unas 4 firmware < 5.1.10
ui unas pro 4 firmware < 5.1.10
ui unas pro 8 firmware < 5.1.10
ui unas pro firmware < 5.1.10
ui unifi cloud gateway fiber firmware < 5.1.12
ui unifi cloud gateway industrial firmware < 5.1.12
ui unifi cloud gateway max firmware < 5.1.12
ui unifi cloud gateway ultra firmware < 5.1.12
ui unifi cloud key plus firmware < 5.1.12
ui unifi cloudkey enterprise firmware < 5.1.12
ui unifi cloudkey firmware < 5.1.12
ui unifi dream machine beast firmware < 5.1.11
ui unifi dream machine firmware < 5.1.12
ui unifi dream machine pro firmware < 5.1.12
ui unifi dream machine pro max firmware < 5.1.12
ui unifi dream machine special edition firmware < 5.1.12
ui unifi dream router 5g max firmware < 5.1.12
ui unifi dream router 7 firmware < 5.1.12
ui unifi dream router firmware < 5.1.12
ui unifi dream wall firmware < 5.1.12
ui unifi express 7 firmware < 5.1.12
ui unifi network video recorder firmware < 5.1.12
ui unifi network video recorder g2 firmware < 5.1.12
ui unifi network video recorder g2 pro firmware < 5.1.12
ui unifi network video recorder instant firmware < 5.1.12
ui unifi network video recorder pro firmware < 5.1.12
ui unifi os server < 5.0.8

Referenzen und Patches

CPE-Treffer (NVD) (31)
  • cpe:2.3:a:ui:unifi_os_server:*:*:*:*:*:*:*:* < 5.0.8
  • cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_machine_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_wall_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_express_7_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_cloudkey_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:* < 5.1.12
  • cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:* < 5.1.11
  • cpe:2.3:o:ui:unas_2_firmware:*:*:*:*:*:*:*:* < 5.1.10
  • cpe:2.3:o:ui:unas_4_firmware:*:*:*:*:*:*:*:* < 5.1.10
  • cpe:2.3:o:ui:unas_pro_firmware:*:*:*:*:*:*:*:* < 5.1.10
  • cpe:2.3:o:ui:unas_pro_4_firmware:*:*:*:*:*:*:*:* < 5.1.10
  • cpe:2.3:o:ui:unas_pro_8_firmware:*:*:*:*:*:*:*:* < 5.1.10