High severity8.6NVD Advisory· Published Jul 2, 2026· Updated Jul 10, 2026
CVE-2026-54403
CVE-2026-54403
Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.
Affected products
33- cpe:2.3:o:ui:enterprise_firewall_core_firmware:*:*:*:*:*:*:*:*Range: <=5.1.18
- cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.