Ubiquiti UniFi OS Improper Access Control Vulnerability

Mô tả

Tham khảo

• community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai · Exploit
• CISA KEV · CVE-2026-34908

Lỗ hổng khác của unifi os server

• CVE-2026-55110TRUNG BÌNH 6.1A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration …
• CVE-2026-54404CAO 8.8A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found …
• CVE-2026-54403CAO 8.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypas…
• CVE-2026-54402CAO 8.8A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS t…
• CVE-2026-54401CAO 8.8A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges wi…