CVE-2026-54404
גבוהה 8.8
תיאור (מקור, אנגלית)
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
מדדים
- CVSS 3.1
-
8.8 (HIGH)
מקור הציון: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-15/8/2026
- CWE
- CWE-89
מוצרים מושפעים
ui: unifi dream machine beast firmware; ui: unifi dream machine beast; ui: enterprise fortress gateway firmware; ui: enterprise fortress gateway; ui: unifi dream router firmware; ui: unifi dream router; ui: unifi dream wall firmware; ui: unifi dream wall; ui: unifi dream router 7 firmware; ui: unifi dream router 7; ui: unifi express 7 firmware; ui: unifi express 7; ui: unifi cloudkey firmware; ui: unifi cloudkey; ui: unifi cloud key plus firmware