8.1 HighCWE-284
CVE-2026-48610
Ubiquiti Inc UDM vulnerability
Ubiquiti IncUDM
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 30% of scored CVEs
SeverityCVSS
8.1High
Description NVD
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Coverage 1 article · 1 outlet
- Ubiquiti UniFi OS flaws let attackers run commands on devicesSecurityOnline · first in our coverage · mentions it in passing