High severity7.7NVD Advisory· Published May 22, 2026· Updated Jul 23, 2026
CVE-2026-34911
CVE-2026-34911
Description
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Affected products
34- cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*Range: <5.1.11
- cpe:2.3:o:ui:unifi_dream_machine_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
Patches
Vulnerability mechanics
References
1News mentions
2- ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News · May 25, 2026
- Ubiquiti patches three max severity UniFi OS vulnerabilitiesBleepingComputer · May 22, 2026