high7.7
CVE-2026-54401
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS …
Impact
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ui | Unifi Os Server | through 5.1.15 |
| Ui | Unifi Dream Machine Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Pro Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Special Edition Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Pro Max Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Beast Firmware | through 5.1.15 |
| Ui | Enterprise Fortress Gateway Firmware | through 5.1.15 |
| Ui | Unifi Dream Router Firmware | through 5.1.15 |
| Ui | Unifi Dream Wall Firmware | through 5.1.15 |
| Ui | Unifi Dream Router 7 Firmware | through 5.1.15 |
| Ui | Unifi Express 7 Firmware | through 5.1.15 |
| Ui | Unifi Cloudkey Firmware | through 5.1.15 |