vulnti.work

Ubiquiti UniFi OS Path Traversal Vulnerability

High Listed in CISA KEV
CVECVE-2026-34909
First seen2026-06-23 00:00 UTC
Disclosed2026-06-23 00:00 UTC
Last updated2026-07-14 19:30 UTC
Channel statuspending_review

Summary

Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • Ubiquiti:UniFi OS

Sources

  • CISA KEV DATABASE

Original Links

Timeline

  1. kev_added CISA KEV
  2. kev_ingest CISA KEV