CVE-2026-48610
No fix known EPSS <1%CVSS 8.1
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Products: Ubiquiti Inc UDM, Ubiquiti Inc UDM-Pro, Ubiquiti Inc UDM-SE, Ubiquiti Inc UDM-Pro-Max, Ubiquiti Inc UDM-Beast, Ubiquiti Inc EFG, Ubiquiti Inc UDW, Ubiquiti Inc UDR, Ubiquiti Inc UDR7, Ubiquiti Inc UDR-5G, Ubiquiti Inc Express 7, Ubiquiti Inc UCG-Ultra, Ubiquiti Inc UCG-Max, Ubiquiti Inc UCG-Fiber, Ubiquiti Inc UCG-Industrial