CVE-2026-54403

Published: Jul 2, 2026Modified: Jul 10, 2026

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 4.0

Source: support@hackerone.com (Secondary)

Description

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.

Affected (32)

Products: Ui: Unifi Os Server, Unifi Dream Machine Firmware, Unifi Dream Machine Pro Firmware, Unifi Dream Machine Special Edition Firmware, Unifi Dream Machine Pro Max Firmware, Unifi Dream Machine Beast Firmware, Enterprise Fortress Gateway Firmware, Unifi Dream Router Firmware, Unifi Dream Wall Firmware, Unifi Dream Router 7 Firmware, Unifi Express 7 Firmware, Unifi Cloudkey Firmware, Unifi Cloud Key Plus Firmware, Unifi Cloudkey Enterprise Firmware, Unifi Network Video Recorder Firmware, Unifi Network Video Recorder Pro Firmware, Unifi Network Video Recorder Instant Firmware, Enterprise Network Video Recorder Firmware, Enterprise Network Video Recorder Core Firmware, Unifi Network Video Recorder G2 Firmware, Unifi Network Video Recorder G2 Pro Firmware, Unifi Cloud Gateway Ultra Firmware, Unifi Cloud Gateway Max Firmware, Unifi Cloud Gateway Industrial Firmware, Unifi Cloud Gateway Fiber Firmware, Unas 2 Firmware, Unas 4 Firmware, Unas Pro Firmware, Unas Pro 4 Firmware, Unas Pro 8 Firmware, Enterprise Firewall Core Firmware, Unifi Dream Router 5g Max Firmware

32 products

Unifi Os Server

Unifi Dream Machine Firmware

Unifi Dream Machine Pro Firmware

Unifi Dream Machine Special Edition Firmware

Unifi Dream Machine Pro Max Firmware

Unifi Dream Machine Beast Firmware

Enterprise Fortress Gateway Firmware

Unifi Dream Router Firmware

Unifi Dream Wall Firmware

Unifi Dream Router 7 Firmware

Unifi Express 7 Firmware

Unifi Cloudkey Firmware

Unifi Cloud Key Plus Firmware

Unifi Cloudkey Enterprise Firmware

Unifi Network Video Recorder Firmware

Unifi Network Video Recorder Pro Firmware

Unifi Network Video Recorder Instant Firmware

Enterprise Network Video Recorder Firmware

Enterprise Network Video Recorder Core Firmware

Unifi Network Video Recorder G2 Firmware

Unifi Network Video Recorder G2 Pro Firmware

Unifi Cloud Gateway Ultra Firmware

Unifi Cloud Gateway Max Firmware

Unifi Cloud Gateway Industrial Firmware

Unifi Cloud Gateway Fiber Firmware

Enterprise Firewall Core Firmware

Unifi Dream Router 5g Max Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ui Unifi Os Server	Up to 5.1.15

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Pro Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Pro	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Special Edition Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Special Edition	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Pro Max Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Pro Max	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Machine Beast Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Machine Beast	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Fortress Gateway Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Enterprise Fortress Gateway	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Router Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Router	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Wall Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Wall	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Router 7 Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Router 7	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Express 7 Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Express 7	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloudkey Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloudkey	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Key Plus Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Key Plus	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloudkey Enterprise Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloudkey Enterprise	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder Pro Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder Pro	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder Instant Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder Instant	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Network Video Recorder Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Enterprise Network Video Recorder	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Network Video Recorder Core Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Enterprise Network Video Recorder Core	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder G2 Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder G2	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Network Video Recorder G2 Pro Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Network Video Recorder G2 Pro	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Ultra Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Ultra	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Max Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Max	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Industrial Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Industrial	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Cloud Gateway Fiber Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Cloud Gateway Fiber	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas 2 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas 2	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas 4 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas 4	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas Pro Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas Pro	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas Pro 4 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas Pro 4	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unas Pro 8 Firmware	Up to 5.1.16

Running on/with	Platform Versions
Ui Unas Pro 8	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Enterprise Firewall Core Firmware	Up to 5.1.18

Running on/with	Platform Versions
Ui Enterprise Firewall Core	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ui Unifi Dream Router 5g Max Firmware	Up to 5.1.15

Running on/with	Platform Versions
Ui Unifi Dream Router 5g Max	All versions

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Source: support@hackerone.com

Vendor Advisory

Timeline

No history available yet.