Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi OS Server | < 5.0.8 | 5.0.8 |
| Ubiquiti | Express | < 4.0.14 | 4.0.14 |
| Ubiquiti | UDM | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDM-Pro | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDM-SE | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDM-Pro-Max | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDM-Beast | < 5.1.11 | 5.1.11 |
| Ubiquiti | EFG | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDW | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDR | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDR7 | < 5.1.12 | 5.1.12 |
| Ubiquiti | UDR-5G | < 5.1.12 | 5.1.12 |
| Ubiquiti | Express 7 | < 5.1.12 | 5.1.12 |
| Ubiquiti | UNVR | < 5.1.12 | 5.1.12 |
| Ubiquiti | UNVR-Pro | < 5.1.12 | 5.1.12 |
| Ubiquiti | UNVR-Instant | < 5.1.12 | 5.1.12 |
| Ubiquiti | UNVR-G2 | < 5.1.12 | 5.1.12 |
| Ubiquiti | UNVR-G2-Pro | < 5.1.12 | 5.1.12 |
| Ubiquiti | ENVR | < 5.1.12 | 5.1.12 |
| Ubiquiti | ENVR-Core | < 5.1.12 | 5.1.12 |
| Ubiquiti | UNAS-2 | < 5.1.10 | 5.1.10 |
| Ubiquiti | UNAS-4 | < 5.1.10 | 5.1.10 |
| Ubiquiti | UNAS-Pro | < 5.1.10 | 5.1.10 |
| Ubiquiti | UNAS-Pro-4 | < 5.1.10 | 5.1.10 |
| Ubiquiti | UNAS-Pro-8 | < 5.1.10 | 5.1.10 |
| Ubiquiti | UCKP | < 5.1.12 | 5.1.12 |
| Ubiquiti | UCK | < 5.1.12 | 5.1.12 |
| Ubiquiti | UCK-Enterprise | < 5.1.12 | 5.1.12 |
| Ubiquiti | UCG-Ultra | < 5.1.12 | 5.1.12 |
| Ubiquiti | UCG-Max | < 5.1.12 | 5.1.12 |
| Ubiquiti | UCG-Fiber | < 5.1.12 | 5.1.12 |
| Ubiquiti | UCG-Industrial | < 5.1.12 | 5.1.12 |
Advisories 1
- WID-SEC-2026-1639 Ubiquiti UniFi OS Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 23, 2026