Executive brief
UniFi gateway devices, which provide network connectivity and security for organizations, contain an out-of-bounds read flaw that allows a network-adjacent attacker to crash the device and disrupt network operations. A successful exploit results in temporary unavailability of network gateway services, affecting business connectivity and potentially interrupting critical communications.
Technical details
An out-of-bounds read vulnerability in UniFi gateway firmware allows a network-adjacent attacker to read memory beyond intended boundaries, leading to a denial of service condition. The vulnerability requires network access to the affected device and can be exploited without authentication. Exploitation crashes the gateway, disrupting network traffic and services until the device is restarted.
Affected products
- Ubiquiti UniFi Gateway
Timeline
- 2026-09-22: disclosed