VULNERABILITY INTELLIGENCE

CVE-2026-47369

CVSS score9.9 CRITICAL
EPSS probability0.30%
CISA KEVNot currently listed
Published2026-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

Weakness classification

  • support@hackerone.com: CWE-20

Primary references