CVE-2026-55110
בינונית 6.1
תיאור (מקור, אנגלית)
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
מדדים
- CVSS 3.1
-
6.1 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-15/8/2026
- CWE
- CWE-942
מוצרים מושפעים
ui: unifi os server; ui: unifi dream machine beast firmware; ui: unifi dream machine beast; ui: unifi dream machine pro firmware; ui: unifi dream machine pro; ui: unifi dream machine special edition firmware; ui: unifi dream machine special edition; ui: unifi dream machine pro max firmware; ui: unifi dream machine pro max; ui: enterprise fortress gateway firmware; ui: enterprise fortress gateway; ui: unifi dream router firmware; ui: unifi dream router; ui: unifi dream wall firmware; ui: unifi dream wall