critical9.9
CVE-2026-54402
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command…
Impact
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ui | Unifi Os Server | through 5.1.15 |
| Ui | Unifi Dream Machine Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Pro Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Special Edition Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Pro Max Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Beast Firmware | through 5.1.15 |
| Ui | Enterprise Fortress Gateway Firmware | through 5.1.15 |
| Ui | Unifi Dream Router Firmware | through 5.1.15 |
| Ui | Unifi Dream Wall Firmware | through 5.1.15 |
| Ui | Unifi Dream Router 7 Firmware | through 5.1.15 |
| Ui | Unifi Express 7 Firmware | through 5.1.15 |
| Ui | Unifi Cloudkey Firmware | through 5.1.15 |