CVE-2026-54404
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
- Score
- CVSS 3.1 8.8 High
- Status
- Analyzed - support@hackerone.com
- Published
- 2026-07-02
- Last modified
- 2026-07-03
- Weaknesses
- CWE-89
Affected products
- Cloud Gateways (Ubiquiti Inc)
- Cloud Keys (Ubiquiti Inc)
- Dream Machines (Ubiquiti Inc)
- Dream Routers (Ubiquiti Inc)
- Dream Wall (Ubiquiti Inc)
- Enterprise Firewall Core (Ubiquiti Inc)
- Enterprise Fortress Gateway (Ubiquiti Inc)
- Enterprise Video Recorders (Ubiquiti Inc)
- Express 7 (Ubiquiti Inc)
- Network Attached Storage (Ubiquiti Inc)
- Network Video Recorders (Ubiquiti Inc)
- Unifi Os Server (Ubiquiti Inc)
- Enterprise Firewall Core Firmware (Ui)
- Enterprise Fortress Gateway Firmware (Ui)
- Enterprise Network Video Recorder Core Firmware (Ui)
- Enterprise Network Video Recorder Firmware (Ui)
- Unas 2 Firmware (Ui)
- Unas 4 Firmware (Ui)
- Unas Pro 4 Firmware (Ui)
- Unas Pro 8 Firmware (Ui)
- Unas Pro Firmware (Ui)
- Unifi Cloud Gateway Fiber Firmware (Ui)
- Unifi Cloud Gateway Industrial Firmware (Ui)
- Unifi Cloud Gateway Max Firmware (Ui)
- Unifi Cloud Gateway Ultra Firmware (Ui)
- Unifi Cloud Key Plus Firmware (Ui)
- Unifi Cloudkey Enterprise Firmware (Ui)
- Unifi Cloudkey Firmware (Ui)
- Unifi Dream Machine Beast Firmware (Ui)
- Unifi Dream Machine Firmware (Ui)
- Unifi Dream Machine Pro Firmware (Ui)
- Unifi Dream Machine Pro Max Firmware (Ui)
- Unifi Dream Machine Special Edition Firmware (Ui)
- Unifi Dream Router 5g Max Firmware (Ui)
- Unifi Dream Router 7 Firmware (Ui)
- Unifi Dream Router Firmware (Ui)
- Unifi Dream Wall Firmware (Ui)
- Unifi Express 7 Firmware (Ui)
- Unifi Network Video Recorder Firmware (Ui)
- Unifi Network Video Recorder G2 Firmware (Ui)
- Unifi Network Video Recorder G2 Pro Firmware (Ui)
- Unifi Network Video Recorder Instant Firmware (Ui)
- Unifi Network Video Recorder Pro Firmware (Ui)
- Unifi Os Server (Ui)
References
- https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc
