PT-2026-48823 · Ubiquiti · Efg+31

Published 2026-06-12 · Updated 2026-06-12 · CVE-2026-47369

Mitre

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-47369

Affected Products

Efg

Envr

Envr-Core

Express

Express 7

Ucg-Fiber

Ucg-Industrial

Ucg-Max

Ucg-Ultra

Uck

Uck-Enterprise

Uckp

Udm

Udm-Beast

Udm-Pro

Udm-Pro-Max

Udm-Se

Udr

Udr-5G

Udr7

Udw

Unas-2

Unas-4

Unas-Pro

Unas-Pro-4

Unas-Pro-8

Unvr

Unvr-G2

Unvr-G2-Pro

Unvr-Instant

Unvr-Pro

Unifi Os Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-47369 · Security Note
• https://community.ui.com/releases/Security-Advisory-Bulletin-065-065/aa46a22b-fc43-4eae-9382-6fc8feda967a · Note