Ubiquiti UniFi OS Improper Input Validation Vulnerability

概要

参考情報

• community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai · Exploit
• CISA KEV · CVE-2026-34910

unifi os server のその他の脆弱性

• CVE-2026-55110中 6.1A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration …
• CVE-2026-54404高 8.8A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found …
• CVE-2026-54403高 8.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypas…
• CVE-2026-54402高 8.8A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS t…
• CVE-2026-54401高 8.8A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges wi…