Veille CVE
CVE-2026-54404
8.8 ÉlevéeDescription
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
Produits concernés
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Fortress Gateway
- Ubiquiti Inc Dream Wall
- Ubiquiti Inc Dream Routers
- Ubiquiti Inc Express 7
- Ubiquiti Inc Cloud Keys
- Ubiquiti Inc Network Video Recorders
- Ubiquiti Inc Enterprise Video Recorders
- Ubiquiti Inc Cloud Gateways
- Ubiquiti Inc Network Attached Storage
- Ubiquiti Inc Enterprise Firewall Core
- Ui unifi dream machine beast firmware
- Ui enterprise fortress gateway firmware
- Ui unifi dream router firmware
- Ui unifi dream wall firmware
- Ui unifi dream router 7 firmware
- Ui unifi express 7 firmware
- Ui unifi cloudkey firmware
- Ui unifi cloud key plus firmware
- Ui unifi cloudkey enterprise firmware
- Ui unifi network video recorder firmware
- Ui unifi network video recorder pro firmware
- Ui unifi network video recorder instant firmware
- Ui enterprise network video recorder firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | support@hackerone.com | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |