60
CVE-2026-34911
—CVSS 3.1
7.7 high
EPSS
<1%p50
Published
()
Modified
Description
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
- Vendors
- ui
- Products
- unifi os server, unifi cloud gateway industrial firmware, unifi dream machine firmware, unifi dream machine pro firmware, unifi dream machine special edition firmware, unifi dream machine pro max firmware, enterprise fortress gateway firmware, unifi dream wall firmware, unifi dream router firmware, unifi dream router 7 firmware, unifi express 7 firmware, unifi network video recorder firmware
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N