CVE-2026-54403

תיאור (מקור, אנגלית)

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.

מדדים

CVSS 3.1

8.6 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS — סבירות ניצול

1% (אחוזון 000) נכון ל-15/8/2026

CWE

CWE-22

מוצרים מושפעים

ui: unifi os server; ui: unifi dream machine firmware; ui: unifi dream machine; ui: unifi dream machine pro firmware; ui: unifi dream machine pro; ui: unifi dream machine special edition firmware; ui: unifi dream machine special edition; ui: unifi dream machine pro max firmware; ui: unifi dream machine pro max; ui: unifi dream machine beast firmware; ui: unifi dream machine beast; ui: enterprise fortress gateway firmware; ui: enterprise fortress gateway; ui: unifi dream router firmware; ui: unifi dream router

קישורים

• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-‮… Vendor Advisory