Veille CVE
CVE-2026-48610
8.1 ÉlevéeDescription
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Produits concernés
- Ubiquiti Inc UDM
- Ubiquiti Inc UDM-Pro
- Ubiquiti Inc UDM-SE
- Ubiquiti Inc UDM-Pro-Max
- Ubiquiti Inc UDM-Beast
- Ubiquiti Inc EFG
- Ubiquiti Inc UDW
- Ubiquiti Inc UDR
- Ubiquiti Inc UDR7
- Ubiquiti Inc UDR-5G
- Ubiquiti Inc Express 7
- Ubiquiti Inc UCG-Ultra
- Ubiquiti Inc UCG-Max
- Ubiquiti Inc UCG-Fiber
- Ubiquiti Inc UCG-Industrial
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.1 Élevée | support@hackerone.com | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |