high7.7
CVE-2026-34911
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the u…
Impact
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ui | Unifi Os Server | before 5.0.8 |
| Ui | Unifi Cloud Gateway Industrial Firmware | before 5.1.12 |
| Ui | Unifi Dream Machine Firmware | before 5.1.12 |
| Ui | Unifi Dream Machine Pro Firmware | before 5.1.12 |
| Ui | Unifi Dream Machine Special Edition Firmware | before 5.1.12 |
| Ui | Unifi Dream Machine Pro Max Firmware | before 5.1.12 |
| Ui | Enterprise Fortress Gateway Firmware | before 5.1.12 |
| Ui | Unifi Dream Wall Firmware | before 5.1.12 |
| Ui | Unifi Dream Router Firmware | before 5.1.12 |
| Ui | Unifi Dream Router 7 Firmware | before 5.1.12 |
| Ui | Unifi Express 7 Firmware | before 5.1.12 |
| Ui | Unifi Network Video Recorder Firmware | before 5.1.12 |