CVE-2026-54404
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
Fraqueza
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
Produtos afetados
- ui unifi_dream_machine_beast_firmware
- ui unifi_dream_machine_beast
- ui enterprise_fortress_gateway_firmware
- ui enterprise_fortress_gateway
- ui unifi_dream_router_firmware
- ui unifi_dream_router
- ui unifi_dream_wall_firmware
- ui unifi_dream_wall
Referências
Encontre a falha antes de um atacante.
Entre com o GitHub e rode sua primeira auditoria em menos de um minuto. O plano gratuito não exige cartão de crédito.