Executive brief
A security vulnerability has been identified in Ubiquiti UniFi OS, the software that manages various networking and security devices like routers, video recorders, and storage systems. An attacker with network access can bypass the login process to gain unauthorized access to the device management interface. This could allow an unauthorized user to view sensitive configuration data or monitor network activity, potentially compromising the security of the entire managed environment.
Technical details
A path traversal vulnerability (CWE-22) exists in Ubiquiti UniFi OS versions prior to 5.1.19. The flaw allows a remote, unauthenticated attacker with network access to bypass authentication mechanisms by manipulating file paths in requests. Successful exploitation grants the attacker unauthorized access to the UniFi OS management interface or specific instances. The vulnerability affects a wide range of hardware including Dream Machines, Cloud Keys, and Network Video Recorders. Users are advised to update to UniFi OS version 5.1.19 or later to remediate the issue.
Affected products
- Ubiquiti Inc UniFi OS Server < 5.1.19
- Ubiquiti Inc Dream Machines < 5.1.19
- Ubiquiti Inc Enterprise Fortress Gateway < 5.1.19
- Ubiquiti Inc Dream Wall < 5.1.19
- Ubiquiti Inc Dream Routers < 5.1.19
- Ubiquiti Inc Express 7 < 5.1.19
- Ubiquiti Inc Cloud Keys < 5.1.19
- Ubiquiti Inc Network Video Recorders < 5.1.19
- Ubiquiti Inc Enterprise Video Recorders < 5.1.19
- Ubiquiti Inc Cloud Gateways < 5.1.19
- Ubiquiti Inc Network Attached Storage < 5.1.19
- Ubiquiti Inc Enterprise Firewall Core < 5.1.19
Timeline
- 2026-07-02: disclosed
- 2026-07-02: advisory