Skip to content
OpenAdvisories
High · 8.7 CVE-2026-54406 EUVD-2026-41385GHSA-h9fm-m325-j8cf

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instance…

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by hackerone

Description

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi Network Application < 10.4.57 10.4.57

Advisories 2

References