CyberSIXT Search
Ubiquiti product

UniFi OS Server

← All Ubiquiti products

No UniFi OS Server CVE is in the CISA KEV catalogue.

Tracked since 12 Jun · latest article Wed 26 Aug · RSS

High exploit odds · current
0
high · not in KEV

Exploited, by due date

CSV download

No UniFi OS Server CVE is in the CISA KEV catalogue.

Coverage

3 articles · all timeFull timeline →

Three articles so far, 12 Jun to 26 Aug.

123
  1. Ubiquiti UniFi OS flaws let attackers run commands on devicesSecurityOnline
  2. Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746Security Affairs
  3. UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti ProductsSecurityOnline
See the full timeline
  1. UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti ProductsSecurityOnline
  2. Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746Security Affairs
  3. Ubiquiti UniFi OS flaws let attackers run commands on devicesSecurityOnline

All CVEs in coverage

5
CVE-2026-54402Ubiquiti Inc UniFi OS Server vulnerabilityCVSS9.9Critical–Not in KEV1.8%EPSS1article
CVE-2026-47370Ubiquiti Inc UniFi OS Server vulnerabilityCVSS9.9Critical–Not in KEV1.4%EPSS1article
CVE-2026-77550Ubiquiti Inc UniFi OS Server vulnerabilityCVSS10.0Critical–Not in KEV0.8%EPSS1article
CVE-2026-47368Ubiquiti Inc UniFi OS Server vulnerabilityCVSS8.6High–Not in KEV0.5%EPSS1article
CVE-2026-47369Ubiquiti Inc UniFi OS Server vulnerabilityCVSS9.9Critical–Not in KEV0.5%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device