CVE Catalog
CVE-2026-54402
CriticalCVSS 9.9Exploitation Probability (EPSS)
Elevated risk0.87%
55th percentile - higher than 55% of all known CVEs
Summary
A vulnerability in UniFi OS allows an attacker with network access and low privileges to execute command injection on the host device due to improper input validation.
Risk Assessment
An attacker could gain full control of the device, compromising confidentiality, integrity, and availability of the system.
Recommendation
Immediately update UniFi OS to the latest version and restrict network access to the devices to trusted hosts only.
Original NVD description (English source)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.