Description
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | Dream Machines | < 5.1.19 | 5.1.19 |
| Ubiquiti | Enterprise Fortress Gateway | < 5.1.19 | 5.1.19 |
| Ubiquiti | Dream Wall | < 5.1.19 | 5.1.19 |
| Ubiquiti | Dream Routers | < 5.1.19 | 5.1.19 |
| Ubiquiti | Express 7 | < 5.1.19 | 5.1.19 |
| Ubiquiti | Cloud Gateways | < 5.1.19 | 5.1.19 |
| Ubiquiti | Enterprise Firewall Core | < 5.1.19 | 5.1.19 |
Advisories 2
- NCSC-2026-0221 Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti Networks NCSC-NL (Netherlands) · Jul 7, 2026
- WID-SEC-2026-2171 Ubiquiti UniFi: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 2, 2026