Executive brief
A security vulnerability has been identified in several Ubiquiti UniFi networking devices, including Dream Machines and Cloud Gateways. An attacker with network access could bypass security controls to make unauthorized changes to the device's configuration. This could lead to a complete takeover of the network infrastructure, potentially allowing the attacker to intercept traffic or disable security features.
Technical details
An improper access control vulnerability (CWE-284) exists in UniFi OS affecting multiple Ubiquiti hardware platforms. The flaw allows a network-adjacent or remote attacker (depending on network configuration) to bypass authorization mechanisms and perform unauthorized administrative changes. While the attack complexity is rated as high, successful exploitation grants the attacker significant control over the device, potentially impacting the confidentiality, integrity, and availability of the entire managed network. The vulnerability is addressed in UniFi OS version 5.1.19 and later.
Affected products
- Ubiquiti Inc Dream Machines < 5.1.19
- Ubiquiti Inc Enterprise Fortress Gateway < 5.1.19
- Ubiquiti Inc Dream Wall < 5.1.19
- Ubiquiti Inc Dream Routers < 5.1.19
- Ubiquiti Inc Express 7 < 5.1.19
- Ubiquiti Inc Cloud Gateways < 5.1.19
- Ubiquiti Inc Enterprise Firewall Core < 5.1.19
Timeline
- 2026-07-02: disclosed
- 2026-07-02: advisory