← Back

CVE-2026-33000

nvd nist
Published: May 22, 2026Modified: Jul 23, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.3 / Impact: 6.0
Source: support@hackerone.com (Secondary)

Description

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Affected (1)

Products: Ui: Unifi Os Server
Ui
1 product
Unifi Os Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Unifi Os Server
Before 5.0.8

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

Source: support@hackerone.com
PatchVendor Advisory

Timeline

No history available yet.