Veille CVE
CVE-2026-34911
7.7 ÉlevéeDescription
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Produits concernés
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc UDM
- Ubiquiti Inc UDM-Pro
- Ubiquiti Inc UDM-SE
- Ubiquiti Inc UDM-Pro-Max
- Ubiquiti Inc UDM-Beast
- Ubiquiti Inc EFG
- Ubiquiti Inc UDW
- Ubiquiti Inc UDR
- Ubiquiti Inc UDR7
- Ubiquiti Inc UDR-5G
- Ubiquiti Inc Express 7
- Ubiquiti Inc UNVR
- Ubiquiti Inc UNVR-Pro
- Ubiquiti Inc UNVR-Instant
- Ubiquiti Inc UNVR-G2
- Ubiquiti Inc UNVR-G2-Pro
- Ubiquiti Inc ENVR
- Ubiquiti Inc ENVR-Core
- Ubiquiti Inc UNAS-2
- Ubiquiti Inc UNAS-4
- Ubiquiti Inc UNAS-Pro
- Ubiquiti Inc UNAS-Pro-4
- Ubiquiti Inc UNAS-Pro-8
- Ubiquiti Inc UCKP
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.7 Élevée | support@hackerone.com | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |