critical

UniFi OS Improper Input Validation Privilege Escalation (CVE-2026-47369)

critical-cve-against-infra · active

A low-privileged attacker with network access can exploit an improper input validation flaw in certain UniFi OS devices to escalate privileges. The issue is tracked as CVE-2026-47369 / GHSA-h6vq-x5fv-h7q3 and addressed in Ubiquiti Security Advisory Bulletin 065.

Affected packages

Sources