CVE-2026-33000

No fix known EPSS 1%CVSS 9.1

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Published 2026-05-22 · CVE record · OSV

Products: Ubiquiti Inc UniFi OS Server