Veille CVE
CVE-2026-54401
8.8 ÉlevéeDescription
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
Produits concernés
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Fortress Gateway
- Ubiquiti Inc Dream Wall
- Ubiquiti Inc Dream Routers
- Ubiquiti Inc Express 7
- Ubiquiti Inc Cloud Keys
- Ubiquiti Inc Network Video Recorders
- Ubiquiti Inc Enterprise Video Recorders
- Ubiquiti Inc Cloud Gateways
- Ubiquiti Inc Network Attached Storage
- Ubiquiti Inc Enterprise Firewall Core
- Ui unifi os server
- Ui unifi dream machine firmware
- Ui unifi dream machine pro firmware
- Ui unifi dream machine special edition firmware
- Ui unifi dream machine pro max firmware
- Ui unifi dream machine beast firmware
- Ui enterprise fortress gateway firmware
- Ui unifi dream router firmware
- Ui unifi dream wall firmware
- Ui unifi dream router 7 firmware
- Ui unifi express 7 firmware
- Ui unifi cloudkey firmware
- Ui unifi cloud key plus firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.7 Élevée | support@hackerone.com | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |