CVE-2026-95862

State: Published
Severity: 7.5 High
Published: Sep 22, 2026
Updated: Sep 22, 2026
Reserved: Sep 22, 2026

Description

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Ubiquiti

Weaknesses

CWE-787 Out-of-bounds write

Affected Products

Product	Versions
Dream MachinesUbiquiti Inc	before 5.1.31Affected
Enterprise FirewallsUbiquiti Inc	before 5.1.31Affected
Dream RoutersUbiquiti Inc	before 5.1.31Affected
Cloud GatewaysUbiquiti Inc	before 5.1.31Affected
Dream WallUbiquiti Inc	before 5.1.31Affected
ExpressUbiquiti Inc	before 4.0.21Affected
Express 7Ubiquiti Inc	before 5.1.31Affected
UniFi GatewaysUbiquiti Inc	before 5.1.26Affected

References

https://community.ui.com/releases/Security-Advisory-Bulletin-069-069/07e367a7-edec-4d85-a058-f97e5ce9ac9c

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.