Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-34909

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f6607b358e9ca9c5e64f4cc95f1b751967bd1dc337d232a6061fb8ba34b5c56b
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 32 assertions

{"defaultStatus":"unaffected","product":"UDW","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/8

{"defaultStatus":"unaffected","product":"ENVR","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/18

{"defaultStatus":"unaffected","product":"UCG-Fiber","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/30

{"defaultStatus":"unaffected","product":"Express","vendor":"Ubiquiti Inc","versions":[{"lessThan":"4.0.14","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"UNAS-Pro-8","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/24

{"defaultStatus":"unaffected","product":"UDR","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/9

{"defaultStatus":"unaffected","product":"UNVR-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/14

{"defaultStatus":"unaffected","product":"UCKP","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/25

{"defaultStatus":"unaffected","product":"EFG","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/7

{"defaultStatus":"unaffected","product":"UCG-Industrial","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/31

{"defaultStatus":"unaffected","product":"UCK","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/26

{"defaultStatus":"unaffected","product":"UDM-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/3

{"defaultStatus":"unaffected","product":"UNVR-Instant","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/15

{"defaultStatus":"unaffected","product":"UDM-Beast","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.11","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/6

{"defaultStatus":"unaffected","product":"Express 7","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/12

{"defaultStatus":"unaffected","product":"UNAS-Pro-4","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/23

{"defaultStatus":"unaffected","product":"UniFi OS Server","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.0.8","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"UCG-Max","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/29

{"defaultStatus":"unaffected","product":"ENVR-Core","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/19

{"defaultStatus":"unaffected","product":"UNVR","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/13

{"defaultStatus":"unaffected","product":"UDM-SE","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/4

{"defaultStatus":"unaffected","product":"UNAS-4","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/21

{"defaultStatus":"unaffected","product":"UDM","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/2

{"defaultStatus":"unaffected","product":"UCK-Enterprise","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/27

{"defaultStatus":"unaffected","product":"UNAS-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/22

{"defaultStatus":"unaffected","product":"UDR-5G","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/11

{"defaultStatus":"unaffected","product":"UNVR-G2-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/17

{"defaultStatus":"unaffected","product":"UNAS-2","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/20

{"defaultStatus":"unaffected","product":"UDM-Pro-Max","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/5

{"defaultStatus":"unaffected","product":"UCG-Ultra","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/28

{"defaultStatus":"unaffected","product":"UNVR-G2","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/16

{"defaultStatus":"unaffected","product":"UDR7","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/10

Affected products and versions

32 source assertions
{"defaultStatus":"unaffected","product":"UDW","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/8
{"defaultStatus":"unaffected","product":"ENVR","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/18
{"defaultStatus":"unaffected","product":"UCG-Fiber","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/30
{"defaultStatus":"unaffected","product":"Express","vendor":"Ubiquiti Inc","versions":[{"lessThan":"4.0.14","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"UNAS-Pro-8","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/24
{"defaultStatus":"unaffected","product":"UDR","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/9
{"defaultStatus":"unaffected","product":"UNVR-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/14
{"defaultStatus":"unaffected","product":"UCKP","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/25
{"defaultStatus":"unaffected","product":"EFG","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/7
{"defaultStatus":"unaffected","product":"UCG-Industrial","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/31
{"defaultStatus":"unaffected","product":"UCK","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/26
{"defaultStatus":"unaffected","product":"UDM-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/3
{"defaultStatus":"unaffected","product":"UNVR-Instant","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/15
{"defaultStatus":"unaffected","product":"UDM-Beast","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.11","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/6
{"defaultStatus":"unaffected","product":"Express 7","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/12
{"defaultStatus":"unaffected","product":"UNAS-Pro-4","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/23
{"defaultStatus":"unaffected","product":"UniFi OS Server","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.0.8","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"UCG-Max","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/29
{"defaultStatus":"unaffected","product":"ENVR-Core","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/19
{"defaultStatus":"unaffected","product":"UNVR","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/13
{"defaultStatus":"unaffected","product":"UDM-SE","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/4
{"defaultStatus":"unaffected","product":"UNAS-4","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/21
{"defaultStatus":"unaffected","product":"UDM","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/2
{"defaultStatus":"unaffected","product":"UCK-Enterprise","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/27
{"defaultStatus":"unaffected","product":"UNAS-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/22
{"defaultStatus":"unaffected","product":"UDR-5G","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/11
{"defaultStatus":"unaffected","product":"UNVR-G2-Pro","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/17
{"defaultStatus":"unaffected","product":"UNAS-2","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.10","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/20
{"defaultStatus":"unaffected","product":"UDM-Pro-Max","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/5
{"defaultStatus":"unaffected","product":"UCG-Ultra","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/28
{"defaultStatus":"unaffected","product":"UNVR-G2","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/16
{"defaultStatus":"unaffected","product":"UDR7","vendor":"Ubiquiti Inc","versions":[{"lessThan":"5.1.12","status":"affected","version":"0","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/affected/10

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":10,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-22","description":"CWE-22 Path Traversal","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-22"],"dateAdded":"2026-06-23","dueDate":"2026-06-26","knownRansomwareCampaignUse":"Unknown","notes":"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909","product":"UniFi OS","requiredAction":"Apply mitigations in accordan…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:1ef6cbe6b9b3076fc889dd7e76d141edbb1b0d1e756037fc7096d486b3355350 · sha256:635dff916c4092c0… · /vulnerabilities/35
    Open source location →
{"cwes":["CWE-22"],"dateAdded":"2026-06-23","dueDate":"2026-06-26","knownRansomwareCampaignUse":"Unknown","notes":"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909","product":"UniFi OS","requiredAction":"Apply mitigations in accordan…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:1c7a5bd388cb1ff479c45817cce791e5361fc708e6f248bbc8e7cbc32c14263b · sha256:16acee8334e59e44… · /vulnerabilities/32
    Open source location →

Source references

3 source assertions
{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/cna/references/0
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34909"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/adp/0/references/1
{"tags":["third-party-advisory"],"url":"https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:4ca6174b0a45644b12b771b7b7cad335bfcc6c4c103ccc56ae922da1a2579e1f · sha256:395f93297abd3a74… · /containers/adp/0/references/0

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer