CVE Catalog

CVE-2026-47369

CriticalCVSS 9.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.06%

20th percentile — higher than 20% of all known CVEs

Summary

A vulnerability related to improper input validation exists in devices running UniFi OS, which could be exploited by a malicious actor with low privileges to escalate privileges.

Risk Assessment

The organization may be exposed to unauthorized access to UniFi OS systems, potentially leading to serious security breaches.

Recommendation

It is recommended to update devices to the latest version of UniFi OS and monitor network access to detect potential privilege escalation attempts.

Original NVD description (English source)

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS