Summary
Ein Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi OS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, erweiterte Berechtigungen zu erlangen, Zugriffskontrollen zu umgehen und Daten zu manipulieren.
Product
UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.
Vulnerabilities 5
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
High 8.6
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices runn…
-
High 8.1
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-36383, EUVD-2026-36384, EUVD-2026-36379, EUVD-2026-36381
-
#1
Initiale Fassung
References
-
Unifi Security Advisory Bulletin 065 vom 2026-06-10
https://community.ui.com/releases/Security-Advisory-Bulletin-065-065/aa46a22b-fc43-4eae-9382-6fc8feda967a