CVE-2026-54401

State: Published
Severity: 7.7 High
Published: Jul 2, 2026
Updated: Jul 2, 2026
Reserved: Jun 13, 2026

Description

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.

Scores

CVSS	Score	Vector	Source
3.1	7.7 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N	hackerone

Weaknesses

CWE-918 Server-Side Request Forgery (SSRF)

Affected Products

Product	Versions
UniFi OS ServerUbiquiti Inc	before 5.1.19Affected
Dream MachinesUbiquiti Inc	before 5.1.19Affected
Enterprise Fortress GatewayUbiquiti Inc	before 5.1.19Affected
Dream WallUbiquiti Inc	before 5.1.19Affected
Dream RoutersUbiquiti Inc	before 5.1.19Affected
Express 7Ubiquiti Inc	before 5.1.19Affected
Cloud KeysUbiquiti Inc	before 5.1.19Affected
Network Video RecordersUbiquiti Inc	before 5.1.19Affected
Enterprise Video RecordersUbiquiti Inc	before 5.1.19Affected
Cloud GatewaysUbiquiti Inc	before 5.1.19Affected
Network Attached StorageUbiquiti Inc	before 5.1.19Affected
Enterprise Firewall CoreUbiquiti Inc	before 5.1.19Affected

References

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.