MSRXMSRXSecurity
Vulnerabilities / CVE-2026-34909

CVE-2026-34909

Published 2026-05-22 · Analyzed

CVE-2026-34909

Ubiquiti UniFi OS Path Traversal Vulnerability

Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2026-06-23, with a fix-by date of 2026-06-26. Patch it first.

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

10.0 CRITICAL
CVSS 3.1 · CNA · hackerone.com
68%
chance of exploitation in the next 30 days (EPSS; in the top 1% of all CVEs)

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.

Scores

10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCNA · hackerone.com

Affected products

  • ui unifi os server: < 5.0.8
  • ui unifi cloud gateway industrial firmware: < 5.1.12
  • ui unifi dream machine firmware: < 5.1.12
  • ui unifi dream machine pro firmware: < 5.1.12
  • ui unifi dream machine special edition firmware: < 5.1.12
  • ui unifi dream machine pro max firmware: < 5.1.12
  • ui enterprise fortress gateway firmware: < 5.1.12
  • ui unifi dream wall firmware: < 5.1.12
  • ui unifi dream router firmware: < 5.1.12
  • ui unifi dream router 7 firmware: < 5.1.12
  • ui unifi express 7 firmware: < 5.1.12
  • ui unifi network video recorder firmware: < 5.1.12
  • ui unifi network video recorder pro firmware: < 5.1.12
  • ui unifi network video recorder instant firmware: < 5.1.12
  • ui enterprise network video recorder firmware: < 5.1.12
  • ui unifi cloud gateway ultra firmware: < 5.1.12
  • ui unifi cloud gateway max firmware: < 5.1.12
  • ui unifi cloud gateway fiber firmware: < 5.1.12
  • ui unifi dream router 5g max firmware: < 5.1.12
  • ui enterprise network video recorder core firmware: < 5.1.12
  • ui unifi cloud key plus firmware: < 5.1.12
  • ui unifi cloudkey firmware: < 5.1.12
  • ui unifi cloudkey enterprise firmware: < 5.1.12
  • ui unifi network video recorder g2 firmware: < 5.1.12
  • ui unifi network video recorder g2 pro firmware: < 5.1.12

Weakness: CWE-22

3 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website