CVE-2026-54402

Published: Jul 2, 2026Modified: Jul 10, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.

Affected (32)

32 products

Unifi Os Server

Unifi Dream Machine Firmware

Unifi Dream Machine Pro Firmware

Unifi Dream Machine Special Edition Firmware

Unifi Dream Machine Pro Max Firmware

Unifi Dream Machine Beast Firmware

Enterprise Fortress Gateway Firmware

Unifi Dream Router Firmware

Unifi Dream Wall Firmware

Unifi Dream Router 7 Firmware

Unifi Express 7 Firmware

Unifi Cloudkey Firmware

Unifi Cloud Key Plus Firmware

Unifi Cloudkey Enterprise Firmware

Unifi Network Video Recorder Firmware

Unifi Network Video Recorder Pro Firmware

Unifi Network Video Recorder Instant Firmware

Enterprise Network Video Recorder Core Firmware

Unifi Network Video Recorder G2 Firmware

Unifi Network Video Recorder G2 Pro Firmware

Unifi Cloud Gateway Ultra Firmware

Unifi Cloud Gateway Max Firmware

Unifi Cloud Gateway Industrial Firmware

Unifi Cloud Gateway Fiber Firmware

Enterprise Firewall Core Firmware

Unifi Dream Router 5g Max Firmware

Enterprise Network Video Recorder Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ui Unifi Os Server	Up to 5.1.15

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Pro Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Pro	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Special Edition Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Special Edition	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Pro Max Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Pro Max	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Beast Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Beast	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Fortress Gateway Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Enterprise Fortress Gateway	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Router Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Router	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Wall Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Wall	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Router 7 Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Router 7	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Express 7 Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Express 7	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloudkey Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloudkey	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Key Plus Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Key Plus	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloudkey Enterprise Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloudkey Enterprise	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder Pro Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder Pro	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder Instant Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder Instant	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Network Video Recorder Core Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Enterprise Network Video Recorder Core	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder G2 Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder G2	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder G2 Pro Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder G2 Pro	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Ultra Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Ultra	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Max Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Max	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Industrial Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Industrial	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Fiber Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Fiber	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas 2 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas 2	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas 4 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas 4	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas Pro Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas Pro	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas Pro 4 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas Pro 4	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas Pro 8 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas Pro 8	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Firewall Core Firmware	Up to 5.1.18

Running on/with	Platform Versions
Ui Enterprise Firewall Core	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Router 5g Max Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Router 5g Max	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Network Video Recorder Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Enterprise Network Video Recorder	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (1)

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Source: support@hackerone.com

Vendor Advisory

Timeline

No history available yet.