CVE-2026-34911NVD

Vulnerability Summary

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.

Severity Level

HIGH(7.7)

Published Date

May 22, 2026

Last Modified

Jul 23, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

0.68%Probability

Root Weakness (CWE)

CWE-22: Path Traversal ↗

The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.

CVSS v3.1 Base Metrics — Score 7.7 (HIGH)

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeChanged

ConfidentialityHigh

IntegrityNone

AvailabilityNone

Affected & Patched Versions

Affected Versions

Ui Unifi Os Server < 5.0.8
Ui Unifi Cloud Gateway Industrial Firmware < 5.1.12
Ui Unifi Dream Machine Firmware < 5.1.12
Ui Unifi Dream Machine Pro Firmware < 5.1.12
Ui Unifi Dream Machine Special Edition Firmware < 5.1.12
Ui Unifi Dream Machine Pro Max Firmware < 5.1.12
Ui Enterprise Fortress Gateway Firmware < 5.1.12
Ui Unifi Dream Wall Firmware < 5.1.12
Ui Unifi Dream Router Firmware < 5.1.12
Ui Unifi Dream Router 7 Firmware < 5.1.12
Ui Unifi Express 7 Firmware < 5.1.12
Ui Unifi Network Video Recorder Firmware < 5.1.12
Ui Unifi Network Video Recorder Pro Firmware < 5.1.12
Ui Unifi Network Video Recorder Instant Firmware < 5.1.12
Ui Enterprise Network Video Recorder Firmware < 5.1.12
Ui Unifi Cloud Gateway Ultra Firmware < 5.1.12
Ui Unifi Cloud Gateway Max Firmware < 5.1.12
Ui Unifi Cloud Gateway Fiber Firmware < 5.1.12
Ui Unifi Dream Router 5g Max Firmware < 5.1.12
Ui Enterprise Network Video Recorder Core Firmware < 5.1.12
Ui Unifi Cloud Key Plus Firmware < 5.1.12
Ui Unifi Cloudkey Firmware < 5.1.12
Ui Unifi Cloudkey Enterprise Firmware < 5.1.12
Ui Unifi Network Video Recorder G2 Firmware < 5.1.12
Ui Unifi Network Video Recorder G2 Pro Firmware < 5.1.12
Ui Unifi Dream Machine Beast Firmware < 5.1.11
Ui Unas 2 Firmware < 5.1.10
Ui Unas 4 Firmware < 5.1.10
Ui Unas Pro Firmware < 5.1.10
Ui Unas Pro 4 Firmware < 5.1.10
Ui Unas Pro 8 Firmware < 5.1.10

Patched Versions

Ui Unifi Os Server 5.0.8
Ui Unifi Cloud Gateway Industrial Firmware 5.1.12
Ui Unifi Dream Machine Firmware 5.1.12
Ui Unifi Dream Machine Pro Firmware 5.1.12
Ui Unifi Dream Machine Special Edition Firmware 5.1.12
Ui Unifi Dream Machine Pro Max Firmware 5.1.12
Ui Enterprise Fortress Gateway Firmware 5.1.12
Ui Unifi Dream Wall Firmware 5.1.12
Ui Unifi Dream Router Firmware 5.1.12
Ui Unifi Dream Router 7 Firmware 5.1.12
Ui Unifi Express 7 Firmware 5.1.12
Ui Unifi Network Video Recorder Firmware 5.1.12
Ui Unifi Network Video Recorder Pro Firmware 5.1.12
Ui Unifi Network Video Recorder Instant Firmware 5.1.12
Ui Enterprise Network Video Recorder Firmware 5.1.12
Ui Unifi Cloud Gateway Ultra Firmware 5.1.12
Ui Unifi Cloud Gateway Max Firmware 5.1.12
Ui Unifi Cloud Gateway Fiber Firmware 5.1.12
Ui Unifi Dream Router 5g Max Firmware 5.1.12
Ui Enterprise Network Video Recorder Core Firmware 5.1.12
Ui Unifi Cloud Key Plus Firmware 5.1.12
Ui Unifi Cloudkey Firmware 5.1.12
Ui Unifi Cloudkey Enterprise Firmware 5.1.12
Ui Unifi Network Video Recorder G2 Firmware 5.1.12
Ui Unifi Network Video Recorder G2 Pro Firmware 5.1.12
Ui Unifi Dream Machine Beast Firmware 5.1.11
Ui Unas 2 Firmware 5.1.10
Ui Unas 4 Firmware 5.1.10
Ui Unas Pro Firmware 5.1.10
Ui Unas Pro 4 Firmware 5.1.10
Ui Unas Pro 8 Firmware 5.1.10

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.