← CVE Intelligence

CVE-2026-34911

Ubiquiti Inc / UniFi OS Server PUBLISHED

Description (CNA)

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.

Affected (CNA)

Vendor / productVersions
Ubiquiti Inc / UniFi OS Serveraffected 0 before 5.0.8
Ubiquiti Inc / UDMaffected 0 before 5.1.12
Ubiquiti Inc / UDM-Proaffected 0 before 5.1.12
Ubiquiti Inc / UDM-SEaffected 0 before 5.1.12
Ubiquiti Inc / UDM-Pro-Maxaffected 0 before 5.1.12
Ubiquiti Inc / UDM-Beastaffected 0 before 5.1.11
Ubiquiti Inc / EFGaffected 0 before 5.1.12
Ubiquiti Inc / UDWaffected 0 before 5.1.12
Ubiquiti Inc / UDRaffected 0 before 5.1.12
Ubiquiti Inc / UDR7affected 0 before 5.1.12
Ubiquiti Inc / UDR-5Gaffected 0 before 5.1.12
Ubiquiti Inc / Express 7affected 0 before 5.1.12
Ubiquiti Inc / UNVRaffected 0 before 5.1.12
Ubiquiti Inc / UNVR-Proaffected 0 before 5.1.12
Ubiquiti Inc / UNVR-Instantaffected 0 before 5.1.12
Ubiquiti Inc / UNVR-G2affected 0 before 5.1.12
Ubiquiti Inc / UNVR-G2-Proaffected 0 before 5.1.12
Ubiquiti Inc / ENVRaffected 0 before 5.1.12
Ubiquiti Inc / ENVR-Coreaffected 0 before 5.1.12
Ubiquiti Inc / UNAS-2affected 0 before 5.1.10
Ubiquiti Inc / UNAS-4affected 0 before 5.1.10
Ubiquiti Inc / UNAS-Proaffected 0 before 5.1.10
Ubiquiti Inc / UNAS-Pro-4affected 0 before 5.1.10
Ubiquiti Inc / UNAS-Pro-8affected 0 before 5.1.10
Ubiquiti Inc / UCKPaffected 0 before 5.1.12
Ubiquiti Inc / UCKaffected 0 before 5.1.12
Ubiquiti Inc / UCK-Enterpriseaffected 0 before 5.1.12
Ubiquiti Inc / UCG-Ultraaffected 0 before 5.1.12
Ubiquiti Inc / UCG-Maxaffected 0 before 5.1.12
Ubiquiti Inc / UCG-Fiberaffected 0 before 5.1.12
Ubiquiti Inc / UCG-Industrialaffected 0 before 5.1.12

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.