Executive brief
Ubiquiti UniFi OS, the software managing UniFi networking and security devices, contains a critical security flaw. An attacker on the network can bypass security controls to make unauthorized changes to the system. This could lead to a complete takeover of the networking hardware, potentially allowing attackers to intercept traffic or disable security infrastructure.
Technical details
An improper access control vulnerability (CWE-284) exists in multiple Ubiquiti UniFi OS-based devices, including the Dream Machine (UDM) and UniFi Next-Generation Gateway (EFG) lines. The flaw allows an unauthenticated attacker with network access to bypass authorization mechanisms and modify system configurations. According to the CVSS 3.1 vector, the vulnerability has a high impact on confidentiality, integrity, and availability, and can result in a scope change, potentially affecting the broader network managed by the device. Patches have been released for various product lines, with fixed versions ranging from 5.0.8 to 5.1.12 depending on the specific hardware model.
Affected products
- Ubiquiti Inc UniFi OS Server < 5.0.8
- Ubiquiti Inc UDM < 5.1.12
- Ubiquiti Inc UDM-Pro < 5.1.12
- Ubiquiti Inc UDM-SE < 5.1.12
- Ubiquiti Inc UDM-Pro-Max < 5.1.12
- Ubiquiti Inc UDM-Beast < 5.1.11
- Ubiquiti Inc EFG < 5.1.12
- Ubiquiti Inc UDW < 5.1.12
- Ubiquiti Inc UDR < 5.1.12
- Ubiquiti Inc UDR7 < 5.1.12
- Ubiquiti Inc UDR-5G < 5.1.12
- Ubiquiti Inc Express 7 < 5.1.12
Timeline
- 2026-05-21: disclosed: Initial disclosure via HackerOne
- 2026-06-23: advisory: NVD publication date