CVE Catalog
CVE-2026-33000
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk1.12%
63th percentile - higher than 63% of all known CVEs
Summary
A malicious actor with network access and high privileges can exploit an Improper Input Validation vulnerability in UniFi OS devices to execute a Command Injection.
Risk Assessment
An attacker with appropriate privileges can execute arbitrary commands on the device, leading to full compromise.
Recommendation
Apply the vendor patch and restrict network access to UniFi devices.
Original NVD description (English source)
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.