9.9 CriticalCWE-20
CVE-2026-47369
Ubiquiti Inc UniFi OS Server vulnerability
Ubiquiti IncUniFi OS Server
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.3%probability of exploitation in the next 30 days
Higher than 23% of scored CVEs
SeverityCVSS
9.9Critical
Description NVD
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Coverage 1 article · 1 outlet
- Ubiquiti UniFi OS flaws let attackers run commands on devicesSecurityOnline · first in our coverage · mentions it in passing