IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
8.6High

CVE-2026-54403

Ubiquiti Inc UniFi OS Server; Ubiquiti Inc Dream Machines; Ubiquiti Inc Enterprise Fortress Gateway; Ubiquiti Inc Dream Wall Published: (4 months ago)

Description

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.

Weakness (CWE): CWE-22

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Ubiquiti Inc Cloud Gateways < 5.1.19
Ubiquiti Inc Cloud Keys < 5.1.19
Ubiquiti Inc Dream Machines < 5.1.19
Ubiquiti Inc Dream Routers < 5.1.19
Ubiquiti Inc Dream Wall < 5.1.19
Ubiquiti Inc Enterprise Firewall Core < 5.1.19
Ubiquiti Inc Enterprise Fortress Gateway < 5.1.19
Ubiquiti Inc Enterprise Video Recorders < 5.1.19
Ubiquiti Inc Express 7 < 5.1.19
Ubiquiti Inc Network Attached Storage < 5.1.19
Ubiquiti Inc Network Video Recorders < 5.1.19
Ubiquiti Inc UniFi OS Server < 5.1.19
ui enterprise firewall core firmware ≤ 5.1.18
ui enterprise fortress gateway firmware ≤ 5.1.15
ui enterprise network video recorder core firmware ≤ 5.1.15
ui enterprise network video recorder firmware ≤ 5.1.15
ui unas 2 firmware ≤ 5.1.16
ui unas 4 firmware ≤ 5.1.16
ui unas pro 4 firmware ≤ 5.1.16
ui unas pro 8 firmware ≤ 5.1.16
ui unas pro firmware ≤ 5.1.16
ui unifi cloud gateway fiber firmware ≤ 5.1.15
ui unifi cloud gateway industrial firmware ≤ 5.1.15
ui unifi cloud gateway max firmware ≤ 5.1.15
ui unifi cloud gateway ultra firmware ≤ 5.1.15
ui unifi cloud key plus firmware ≤ 5.1.15
ui unifi cloudkey enterprise firmware ≤ 5.1.15
ui unifi cloudkey firmware ≤ 5.1.15
ui unifi dream machine beast firmware ≤ 5.1.15
ui unifi dream machine firmware ≤ 5.1.15
ui unifi dream machine pro firmware ≤ 5.1.15
ui unifi dream machine pro max firmware ≤ 5.1.15
ui unifi dream machine special edition firmware ≤ 5.1.15
ui unifi dream router 5g max firmware ≤ 5.1.15
ui unifi dream router 7 firmware ≤ 5.1.15
ui unifi dream router firmware ≤ 5.1.15
ui unifi dream wall firmware ≤ 5.1.15
ui unifi express 7 firmware ≤ 5.1.15
ui unifi network video recorder firmware ≤ 5.1.15
ui unifi network video recorder g2 firmware ≤ 5.1.15
ui unifi network video recorder g2 pro firmware ≤ 5.1.15
ui unifi network video recorder instant firmware ≤ 5.1.15
ui unifi network video recorder pro firmware ≤ 5.1.15
ui unifi os server ≤ 5.1.15

References and patches

CPE matches (NVD) (32)
  • cpe:2.3:a:ui:unifi_os_server:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_machine_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_wall_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_express_7_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_cloudkey_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15
  • cpe:2.3:o:ui:unas_2_firmware:*:*:*:*:*:*:*:* ≤ 5.1.16
  • cpe:2.3:o:ui:unas_4_firmware:*:*:*:*:*:*:*:* ≤ 5.1.16
  • cpe:2.3:o:ui:unas_pro_firmware:*:*:*:*:*:*:*:* ≤ 5.1.16
  • cpe:2.3:o:ui:unas_pro_4_firmware:*:*:*:*:*:*:*:* ≤ 5.1.16
  • cpe:2.3:o:ui:unas_pro_8_firmware:*:*:*:*:*:*:*:* ≤ 5.1.16
  • cpe:2.3:o:ui:enterprise_firewall_core_firmware:*:*:*:*:*:*:*:* ≤ 5.1.18
  • cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:* ≤ 5.1.15