CVE-2026-54402
critical · 9.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.
9.9
CVSS
1.8%
EPSS (exploit prob.)
77th
EPSS percentile
2026-07-02
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-20CWE-77
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ui | unifi_os_server | <= 5.1.15 |
| ui | unifi_dream_machine_firmware | <= 5.1.15 |
| ui | unifi_dream_machine | all versions |
| ui | unifi_dream_machine_pro_firmware | <= 5.1.15 |
| ui | unifi_dream_machine_pro | all versions |
| ui | unifi_dream_machine_special_edition_firmware | <= 5.1.15 |
| ui | unifi_dream_machine_special_edition | all versions |
| ui | unifi_dream_machine_pro_max_firmware | <= 5.1.15 |
| ui | unifi_dream_machine_pro_max | all versions |
| ui | unifi_dream_machine_beast_firmware | <= 5.1.15 |
| ui | unifi_dream_machine_beast | all versions |
| ui | enterprise_fortress_gateway_firmware | <= 5.1.15 |
| ui | enterprise_fortress_gateway | all versions |
| ui | unifi_dream_router_firmware | <= 5.1.15 |
| ui | unifi_dream_router | all versions |
| ui | unifi_dream_wall_firmware | <= 5.1.15 |
| ui | unifi_dream_wall | all versions |
| ui | unifi_dream_router_7_firmware | <= 5.1.15 |
| ui | unifi_dream_router_7 | all versions |
| ui | unifi_express_7_firmware | <= 5.1.15 |
| ui | unifi_express_7 | all versions |
| ui | unifi_cloudkey_firmware | <= 5.1.15 |
| ui | unifi_cloudkey | all versions |
| ui | unifi_cloud_key_plus_firmware | <= 5.1.15 |
| ui | unifi_cloud_key_plus | all versions |
| ui | unifi_cloudkey_enterprise_firmware | <= 5.1.15 |
| ui | unifi_cloudkey_enterprise | all versions |
| ui | unifi_network_video_recorder_firmware | <= 5.1.15 |
| ui | unifi_network_video_recorder | all versions |
| ui | unifi_network_video_recorder_pro_firmware | <= 5.1.15 |
| ui | unifi_network_video_recorder_pro | all versions |
| ui | unifi_network_video_recorder_instant_firmware | <= 5.1.15 |
| ui | unifi_network_video_recorder_instant | all versions |
| ui | enterprise_network_video_recorder_core_firmware | <= 5.1.15 |
| ui | enterprise_network_video_recorder_core | all versions |
| ui | unifi_network_video_recorder_g2_firmware | <= 5.1.15 |
| ui | unifi_network_video_recorder_g2 | all versions |
| ui | unifi_network_video_recorder_g2_pro_firmware | <= 5.1.15 |
| ui | unifi_network_video_recorder_g2_pro | all versions |
| ui | unifi_cloud_gateway_ultra_firmware | <= 5.1.15 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-54402