Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-34911

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubiquiti Inc UniFi OS Server

Default version status: unaffected

  • 0 to < 5.0.8affected

Ubiquiti Inc UDM

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-SE

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Pro-Max

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Beast

Default version status: unaffected

  • 0 to < 5.1.11affected

Ubiquiti Inc EFG

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDW

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR7

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR-5G

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc Express 7

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-Instant

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-G2

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-G2-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc ENVR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc ENVR-Core

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNAS-2

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-4

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro-4

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro-8

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UCKP

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCK

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCK-Enterprise

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Ultra

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Max

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Fiber

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Industrial

Default version status: unaffected

  • 0 to < 5.1.12affected

References