Critical 9.9 CVSS Ubiquiti UniFi OS Vulnerabilities Exposed
PatchUniFi OS Server 5.1.15UID Enterprise Agent 1.61.4Our summary
Ubiquiti has disclosed multiple critical vulnerabilities in UniFi OS affecting several products, including UDM, UDR, UNVR, and Express network models. Tracked CVE IDs include CVE-2026-47367, CVE-2026-47369, CVE-2026-47370, CVE-2026-47368, and CVE-2026-48610, with issues ranging from command injection to path traversal and broken access control. Because attackers may achieve high-impact control such as remote exploitation, privilege escalation, or unauthorized configuration changes, administrators should update UniFi OS Server to version 5.1.15 and UID Enterprise Agent to version 1.61.4 as soon as possible.
Daily CyberSecurity (securityonline.info) publishes this story on its own site; we link to it rather than reprint it.
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.