Skip to content
OpenAdvisories
High · 8.1 CVE-2026-48610 EUVD-2026-36378GHSA-x48g-g9fg-6pfc

Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found…

Published Jun 12, 2026 · Updated Jun 12, 2026 · Assigned by hackerone

Vendor: Ubiquiti Product: EFG Product: Express 7 Product: UCG-Fiber Product: UCG-Industrial Product: UCG-Max Product: UCG-Ultra Product: UDM Product: UDM-Beast Product: UDM-Pro Product: UDM-Pro-Max Product: UDM-SE Product: UDR Product: UDR-5G Product: UDR7 Product: UDW Category: Network devices

Description

Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Affected products

VendorProductAffectedFixed
Ubiquiti UDM < 5.1.15 5.1.15
Ubiquiti UDM-Pro < 5.1.15 5.1.15
Ubiquiti UDM-SE < 5.1.15 5.1.15
Ubiquiti UDM-Pro-Max < 5.1.15 5.1.15
Ubiquiti UDM-Beast < 5.1.15 5.1.15
Ubiquiti EFG < 5.1.15 5.1.15
Ubiquiti UDW < 5.1.15 5.1.15
Ubiquiti UDR < 5.1.15 5.1.15
Ubiquiti UDR7 < 5.1.15 5.1.15
Ubiquiti UDR-5G < 5.1.15 5.1.15
Ubiquiti Express 7 < 5.1.15 5.1.15
Ubiquiti UCG-Ultra < 5.1.15 5.1.15
Ubiquiti UCG-Max < 5.1.15 5.1.15
Ubiquiti UCG-Fiber < 5.1.15 5.1.15
Ubiquiti UCG-Industrial < 5.1.15 5.1.15

Advisories 1

References