Veille CVE
CVE-2026-55110
6.1 MoyenneDescription
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
Produits concernés
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Fortress Gateway
- Ubiquiti Inc Dream Wall
- Ubiquiti Inc Dream Routers
- Ubiquiti Inc Express 7
- Ubiquiti Inc Cloud Keys
- Ubiquiti Inc Network Video Recorders
- Ubiquiti Inc Enterprise Video Recorders
- Ubiquiti Inc Cloud Gateways
- Ubiquiti Inc Network Attached Storage
- Ubiquiti Inc Enterprise Firewall Core
- Ui unifi os server
- Ui unifi dream machine beast firmware
- Ui unifi dream machine pro firmware
- Ui unifi dream machine special edition firmware
- Ui unifi dream machine pro max firmware
- Ui enterprise fortress gateway firmware
- Ui unifi dream router firmware
- Ui unifi dream wall firmware
- Ui unifi dream router 7 firmware
- Ui unifi express 7 firmware
- Ui unifi cloudkey firmware
- Ui unifi cloud key plus firmware
- Ui unifi cloudkey enterprise firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.5 Élevée | support@hackerone.com | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 6.1 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |