CVEs (5)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Ui 30Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+27 moreJul 9, 2026 Jul 2, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session. |
1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 moreJul 10, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances. |
1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 moreJul 10, 2026 Jul 2, 2026 N/A· v4 8.6 HIGH· v3 N/A· v2 A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances. |
1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 moreJul 10, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device. |
1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 moreJul 10, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances. |