Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-47368

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or ins

Description

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubiquiti Inc UniFi OS Server

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc Express

Default version status: unaffected

  • 0 to < 4.0.15affected

Ubiquiti Inc UDM

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDM-Pro

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDM-SE

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDM-Pro-Max

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDM-Beast

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc EFG

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDW

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDR

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDR7

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UDR-5G

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc Express 7

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UNVR

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UNVR-Pro

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UNVR-Instant

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UNVR-G2

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UNVR-G2-Pro

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc ENVR

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc ENVR-Core

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UNAS-2

Default version status: unaffected

  • 0 to < 5.1.16affected

Ubiquiti Inc UNAS-4

Default version status: unaffected

  • 0 to < 5.1.16affected

Ubiquiti Inc UNAS-Pro

Default version status: unaffected

  • 0 to < 5.1.16affected

Ubiquiti Inc UNAS-Pro-4

Default version status: unaffected

  • 0 to < 5.1.16affected

Ubiquiti Inc UNAS-Pro-8

Default version status: unaffected

  • 0 to < 5.1.16affected

Ubiquiti Inc UCKP

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UCK

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UCK-Enterprise

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UCG-Ultra

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UCG-Max

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UCG-Fiber

Default version status: unaffected

  • 0 to < 5.1.15affected

Ubiquiti Inc UCG-Industrial

Default version status: unaffected

  • 0 to < 5.1.15affected

References