CVE-2026-34911
EUVD-2026-3138722.05.2026, 02:16
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ui | unifi_os_server | 𝑥 < 5.0.8 |
| ui | unifi_cloud_gateway_industrial_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_machine_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_machine_pro_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_machine_special_edition_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_machine_pro_max_firmware | 𝑥 < 5.1.12 |
| ui | enterprise_fortress_gateway_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_wall_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_router_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_router_7_firmware | 𝑥 < 5.1.12 |
| ui | unifi_express_7_firmware | 𝑥 < 5.1.12 |
| ui | unifi_network_video_recorder_firmware | 𝑥 < 5.1.12 |
| ui | unifi_network_video_recorder_pro_firmware | 𝑥 < 5.1.12 |
| ui | unifi_network_video_recorder_instant_firmware | 𝑥 < 5.1.12 |
| ui | enterprise_network_video_recorder_firmware | 𝑥 < 5.1.12 |
| ui | unifi_cloud_gateway_ultra_firmware | 𝑥 < 5.1.12 |
| ui | unifi_cloud_gateway_max_firmware | 𝑥 < 5.1.12 |
| ui | unifi_cloud_gateway_fiber_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_router_5g_max_firmware | 𝑥 < 5.1.12 |
| ui | enterprise_network_video_recorder_core_firmware | 𝑥 < 5.1.12 |
| ui | unifi_cloud_key_plus_firmware | 𝑥 < 5.1.12 |
| ui | unifi_cloudkey_firmware | 𝑥 < 5.1.12 |
| ui | unifi_cloudkey_enterprise_firmware | 𝑥 < 5.1.12 |
| ui | unifi_network_video_recorder_g2_firmware | 𝑥 < 5.1.12 |
| ui | unifi_network_video_recorder_g2_pro_firmware | 𝑥 < 5.1.12 |
| ui | unifi_dream_machine_beast_firmware | 𝑥 < 5.1.11 |
| ui | unas_2_firmware | 𝑥 < 5.1.10 |
| ui | unas_4_firmware | 𝑥 < 5.1.10 |
| ui | unas_pro_firmware | 𝑥 < 5.1.10 |
| ui | unas_pro_4_firmware | 𝑥 < 5.1.10 |
| ui | unas_pro_8_firmware | 𝑥 < 5.1.10 |
𝑥
= Vulnerable software versions