high8.6
CVE-2026-54403
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of…
Impact
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ui | Unifi Os Server | through 5.1.15 |
| Ui | Unifi Dream Machine Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Pro Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Special Edition Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Pro Max Firmware | through 5.1.15 |
| Ui | Unifi Dream Machine Beast Firmware | through 5.1.15 |
| Ui | Enterprise Fortress Gateway Firmware | through 5.1.15 |
| Ui | Unifi Dream Router Firmware | through 5.1.15 |
| Ui | Unifi Dream Wall Firmware | through 5.1.15 |
| Ui | Unifi Dream Router 7 Firmware | through 5.1.15 |
| Ui | Unifi Express 7 Firmware | through 5.1.15 |
| Ui | Unifi Cloudkey Firmware | through 5.1.15 |