Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-33000 EUVD-2026-31385GHSA-3ggx-cv4j-6p7j

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS…

Published May 22, 2026 · Updated May 23, 2026 · Assigned by hackerone

Vendor: Ubiquiti Product: UniFi OS Server Category: Network devices

Description

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi OS Server < 5.0.8 5.0.8

Advisories 1

References