Veille CVE
CVE-2026-47368
8.6 ÉlevéeDescription
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
Produits concernés
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Express
- Ubiquiti Inc UDM
- Ubiquiti Inc UDM-Pro
- Ubiquiti Inc UDM-SE
- Ubiquiti Inc UDM-Pro-Max
- Ubiquiti Inc UDM-Beast
- Ubiquiti Inc EFG
- Ubiquiti Inc UDW
- Ubiquiti Inc UDR
- Ubiquiti Inc UDR7
- Ubiquiti Inc UDR-5G
- Ubiquiti Inc Express 7
- Ubiquiti Inc UNVR
- Ubiquiti Inc UNVR-Pro
- Ubiquiti Inc UNVR-Instant
- Ubiquiti Inc UNVR-G2
- Ubiquiti Inc UNVR-G2-Pro
- Ubiquiti Inc ENVR
- Ubiquiti Inc ENVR-Core
- Ubiquiti Inc UNAS-2
- Ubiquiti Inc UNAS-4
- Ubiquiti Inc UNAS-Pro
- Ubiquiti Inc UNAS-Pro-4
- Ubiquiti Inc UNAS-Pro-8
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.6 Élevée | support@hackerone.com | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |