Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-34909
Analyzed
More InfoOfficial Page
Source-support@hackerone.com
View Known Exploited Vulnerability (KEV) details
Published At-22 May, 2026 | 02:16
Updated At-24 Jun, 2026 | 14:49

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
2026-06-232026-06-26Ubiquiti UniFi OS Path Traversal VulnerabilityApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Date Added: 2026-06-23
Due Date: 2026-06-26
Vulnerability Name: Ubiquiti UniFi OS Path Traversal Vulnerability
Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.110.0CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
N/A
Type: Secondary
Version: 3.1
Base score: 10.0
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Type: N/A
Version:
Base score:
Base severity: N/A
Vector:
CPE Matches

Ubiquiti Inc.
ui
>>unifi_os_server>>Versions before 5.0.8(exclusive)
cpe:2.3:a:ui:unifi_os_server:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_industrial_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_industrial>>-
cpe:2.3:h:ui:unifi_cloud_gateway_industrial:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_machine_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine>>-
cpe:2.3:h:ui:unifi_dream_machine:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_pro_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_pro>>-
cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_special_edition_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_special_edition>>-
cpe:2.3:h:ui:unifi_dream_machine_special_edition:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_pro_max_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_pro_max>>-
cpe:2.3:h:ui:unifi_dream_machine_pro_max:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>enterprise_fortress_gateway_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>enterprise_fortress_gateway>>-
cpe:2.3:h:ui:enterprise_fortress_gateway:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_wall_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_wall_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_wall>>-
cpe:2.3:h:ui:unifi_dream_wall:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_router_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_router>>-
cpe:2.3:h:ui:unifi_dream_router:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_router_7_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_router_7>>-
cpe:2.3:h:ui:unifi_dream_router_7:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_express_7_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_express_7_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_express_7>>-
cpe:2.3:h:ui:unifi_express_7:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder>>-
cpe:2.3:h:ui:unifi_network_video_recorder:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_pro_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_pro>>-
cpe:2.3:h:ui:unifi_network_video_recorder_pro:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_instant_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_instant>>-
cpe:2.3:h:ui:unifi_network_video_recorder_instant:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>enterprise_network_video_recorder_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>enterprise_network_video_recorder>>-
cpe:2.3:h:ui:enterprise_network_video_recorder:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_ultra_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_ultra>>-
cpe:2.3:h:ui:unifi_cloud_gateway_ultra:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_max_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_max>>-
cpe:2.3:h:ui:unifi_cloud_gateway_max:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_fiber_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_gateway_fiber>>-
cpe:2.3:h:ui:unifi_cloud_gateway_fiber:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_router_5g_max_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_router_5g_max>>-
cpe:2.3:h:ui:unifi_dream_router_5g_max:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>enterprise_network_video_recorder_core_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>enterprise_network_video_recorder_core>>-
cpe:2.3:h:ui:enterprise_network_video_recorder_core:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_key_plus_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloud_key_plus>>-
cpe:2.3:h:ui:unifi_cloud_key_plus:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloudkey_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_cloudkey_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloudkey>>-
cpe:2.3:h:ui:unifi_cloudkey:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloudkey_enterprise_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_cloudkey_enterprise>>-
cpe:2.3:h:ui:unifi_cloudkey_enterprise:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_g2_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_g2>>-
cpe:2.3:h:ui:unifi_network_video_recorder_g2:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_g2_pro_firmware>>Versions before 5.1.12(exclusive)
cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_network_video_recorder_g2_pro>>-
cpe:2.3:h:ui:unifi_network_video_recorder_g2_pro:-:*:*:*:*:*:*:*
Ubiquiti Inc.
ui
>>unifi_dream_machine_beast_firmware>>Versions before 5.1.11(exclusive)
cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-22Secondarysupport@hackerone.com
CWE ID: CWE-22
Type: Secondary
Source: support@hackerone.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963bsupport@hackerone.com
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34909134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource
https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/134c704f-9b21-4f2e-91b3-4a467353bcc0
Exploit
Third Party Advisory
Hyperlink: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b
Source: support@hackerone.com
Resource:
Patch
Vendor Advisory
Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34909
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Resource:
US Government Resource
Hyperlink: https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Resource:
Exploit
Third Party Advisory
Change History
0Changes found

Details not found