CVE-2026-54401
A malicious actor with access to the network and low privileges could exploit a Server-Side...
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
- Record
CVE-2026-54401- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
EUVDEUVD-2026-41392
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
- Record
EUVD-2026-41392- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-j9mg-7mrv-2wwc
A malicious actor with access to the network and low privileges could exploit a Server-Side...
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
- Record
GHSA-j9mg-7mrv-2wwc- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
NVD
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
- Record
CVE-2026-54401- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-02
Affected products
- ubiquiti inc cloud gateways
- ubiquiti inc cloud keys
- ubiquiti inc dream machines
- ubiquiti inc dream routers
- ubiquiti inc dream wall
- ubiquiti inc enterprise firewall core
- ubiquiti inc enterprise fortress gateway
- ubiquiti inc enterprise video recorders
- ubiquiti inc express 7
- ubiquiti inc network attached storage
- ubiquiti inc network video recorders
- ubiquiti inc unifi os server
Show 32 moreShow less
- ui enterprise firewall core firmware
- ui enterprise fortress gateway firmware
- ui enterprise network video recorder core firmware
- ui enterprise network video recorder firmware
- ui unas 2 firmware
- ui unas 4 firmware
- ui unas pro 4 firmware
- ui unas pro 8 firmware
- ui unas pro firmware
- ui unifi cloud gateway fiber firmware
- ui unifi cloud gateway industrial firmware
- ui unifi cloud gateway max firmware
- ui unifi cloud gateway ultra firmware
- ui unifi cloud key plus firmware
- ui unifi cloudkey enterprise firmware
- ui unifi cloudkey firmware
- ui unifi dream machine beast firmware
- ui unifi dream machine firmware
- ui unifi dream machine pro firmware
- ui unifi dream machine pro max firmware
- ui unifi dream machine special edition firmware
- ui unifi dream router 5g max firmware
- ui unifi dream router 7 firmware
- ui unifi dream router firmware
- ui unifi dream wall firmware
- ui unifi express 7 firmware
- ui unifi network video recorder firmware
- ui unifi network video recorder g2 firmware
- ui unifi network video recorder g2 pro firmware
- ui unifi network video recorder instant firmware
- ui unifi network video recorder pro firmware
- ui unifi os server
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-54401 is a high vulnerability (CVSS 7.7) in Ubiquiti Inc Cloud Gateways, published July 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. No source names a fixed version.