Ubiquiti UniFi OS Improper Access Control Vulnerability

Description

References

• community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai · Exploit
• CISA KEV · CVE-2026-34908

unifi os server의 다른 취약점

• CVE-2026-55110보통 6.1A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration …
• CVE-2026-54404높음 8.8A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found …
• CVE-2026-54403높음 8.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypas…
• CVE-2026-54402높음 8.8A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS t…
• CVE-2026-54401높음 8.8A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges wi…