CVE-2026-47368
No fix known EPSS <1%CVSS 8.6
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
Products: Ubiquiti Inc UniFi OS Server, Ubiquiti Inc Express, Ubiquiti Inc UDM, Ubiquiti Inc UDM-Pro, Ubiquiti Inc UDM-SE, Ubiquiti Inc UDM-Pro-Max, Ubiquiti Inc UDM-Beast, Ubiquiti Inc EFG, Ubiquiti Inc UDW, Ubiquiti Inc UDR, Ubiquiti Inc UDR7, Ubiquiti Inc UDR-5G, Ubiquiti Inc Express 7, Ubiquiti Inc UNVR, Ubiquiti Inc UNVR PRO, Ubiquiti Inc UNVR-Instant, Ubiquiti Inc UNVR-G2, Ubiquiti Inc UNVR-G2-Pro, Ubiquiti Inc ENVR, Ubiquiti Inc ENVR-Core, Ubiquiti Inc UNAS-2, Ubiquiti Inc UNAS-4, Ubiquiti Inc UNAS-Pro, Ubiquiti Inc UNAS-Pro-4, Ubiquiti Inc UNAS-Pro-8, Ubiquiti Inc UCKP, Ubiquiti Inc UCK, Ubiquiti Inc UCK-Enterprise, Ubiquiti Inc UCG-Ultra, Ubiquiti Inc UCG-Max, Ubiquiti Inc UCG-Fiber, Ubiquiti Inc UCG-Industrial