Enterprise Fortress Gateway Firmware

enterprise_fortress_gateway_firmware

Vendor: Ui • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-55110 1Ui 30Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+27 more Jul 9, 2026 Jul 2, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
CVE-2026-54404 1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 more Jul 10, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
CVE-2026-54403 1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 more Jul 10, 2026 Jul 2, 2026 N/A· v4 8.6 HIGH· v3 N/A· v2 A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.
CVE-2026-54402 1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 more Jul 10, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.
CVE-2026-54401 1Ui 32Enterprise Firewall Core Firmware Enterprise Fortress Gateway FirmwareEnterprise Network Video Recorder Core Firmware+29 more Jul 10, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
CVE-2026-34911 1Ui 31Enterprise Fortress Gateway Firmware Enterprise Network Video Recorder Core FirmwareEnterprise Network Video Recorder Firmware+28 more Jul 23, 2026 May 22, 2026 N/A· v4 7.7 HIGH· v3 N/A· v2 A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitiv...Show more A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.Show less
CVE-2026-34910 1Ui 31Enterprise Fortress Gateway Firmware Enterprise Network Video Recorder Core FirmwareEnterprise Network Video Recorder Firmware+28 more Jul 23, 2026 May 22, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVE-2026-34909 1Ui 32Enterprise Fortress Gateway Firmware Enterprise Network Video Recorder Core FirmwareEnterprise Network Video Recorder Firmware+29 more Jul 23, 2026 May 22, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
CVE-2026-34908 1Ui 31Enterprise Fortress Gateway Firmware Enterprise Network Video Recorder Core FirmwareEnterprise Network Video Recorder Firmware+28 more Jul 23, 2026 May 22, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.