Description
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi OS Server | < 5.1.37 | 5.1.37 |
| Ubiquiti | Cloud Keys | < 5.1.31 | 5.1.31 |
| Ubiquiti | Network Video Recorders | < 5.1.31 | 5.1.31 |
| Ubiquiti | Enterprise Network Video Recorders | < 5.1.31 | 5.1.31 |
| Ubiquiti | Enterprise Network Attached Storage | < 5.1.31 | 5.1.31 |
| Ubiquiti | Dream Machines | < 5.1.31 | 5.1.31 |
| Ubiquiti | Enterprise Firewall Core | < 5.1.31 | 5.1.31 |
| Ubiquiti | Dream Routers | < 5.1.31 | 5.1.31 |
| Ubiquiti | Enterprise Fortress Gateway | < 5.1.31 | 5.1.31 |
| Ubiquiti | Cloud Gateways | < 5.1.31 | 5.1.31 |
| Ubiquiti | Dream Wall | < 5.1.31 | 5.1.31 |
| Ubiquiti | Express 7 | < 5.1.31 | 5.1.31 |
| Ubiquiti | Network Attached Storage | < 5.1.32 | 5.1.32 |
| Ubiquiti | Express | < 4.0.17 | 4.0.17 |
Advisories 2
- NCSC-2026-0330 Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti NCSC-NL (Netherlands) · Aug 27, 2026
- WID-SEC-2026-3028 Ubiquiti UnifiOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 26, 2026