← לוח פגיעויות

CVE-2026-34911

גבוהה 7.7

תיאור (מקור, אנגלית)

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.

מדדים

CVSS 3.1
7.7 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS — סבירות ניצול
1% (אחוזון 000) נכון ל-1/10/2026
CWE
CWE-22

מוצרים מושפעים

ui: unifi os server; ui: unifi cloud gateway industrial firmware; ui: unifi cloud gateway industrial; ui: unifi dream machine firmware; ui: unifi dream machine; ui: unifi dream machine pro firmware; ui: unifi dream machine pro; ui: unifi dream machine special edition firmware; ui: unifi dream machine special edition; ui: unifi dream machine pro max firmware; ui: unifi dream machine pro max; ui: enterprise fortress gateway firmware; ui: enterprise fortress gateway; ui: unifi dream wall firmware; ui: unifi dream wall

קישורים