Veille CVE
CVE-2026-54403
8.6 ÉlevéeDescription
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.
Produits concernés
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Fortress Gateway
- Ubiquiti Inc Dream Wall
- Ubiquiti Inc Dream Routers
- Ubiquiti Inc Express 7
- Ubiquiti Inc Cloud Keys
- Ubiquiti Inc Network Video Recorders
- Ubiquiti Inc Enterprise Video Recorders
- Ubiquiti Inc Cloud Gateways
- Ubiquiti Inc Network Attached Storage
- Ubiquiti Inc Enterprise Firewall Core
- Ui unifi os server
- Ui unifi dream machine firmware
- Ui unifi dream machine pro firmware
- Ui unifi dream machine special edition firmware
- Ui unifi dream machine pro max firmware
- Ui unifi dream machine beast firmware
- Ui enterprise fortress gateway firmware
- Ui unifi dream router firmware
- Ui unifi dream wall firmware
- Ui unifi dream router 7 firmware
- Ui unifi express 7 firmware
- Ui unifi cloudkey firmware
- Ui unifi cloud key plus firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.6 Élevée | support@hackerone.com | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |