Ubiquiti UniFi OS Improper Input Validation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 23/06/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| unifi os server | < 5.0.8 | 5.0.8 |
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free