Ubiquiti UniFi Security Bulletin: Command Injection, LPE, and Access Control Vulnerabilities (CVE-2026-47367/47368/47369/47370/48610)

Vulnerability Overview UniFi has released Security Advisory 065, covering multiple vulnerabilities including command injection, path traversal, privilege escalation, and access control issues. These vulnerabilities could be maliciously exploited to lead to unauthorized data access or system control. Affected Products Vulnerability 1: Command Injection Affected Products: UID Enterprise Agent (version 1.61.3 and earlier) CVSS Score: 9.9 (Critical) CVE: CVE-2026-47367 Vulnerability 2: Path Traversal Affected Products: - UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, IDW, UDR, UDR7, UDR-5G, Express 7, UCK, UCKP, UCK-Enterprise, UNVR, UNVR-Pro, UNVR-Instant, ENVR, ENVR-Core, UNVR-G2, UNVR-G2-Pro, UCO-Ultra, UCO-Max, UCO-Industrial, and UCO-Fiber (version 5.112 and earlier) - UniFi OS Server (version 5.8.8 and earlier) - UDM-Beast (version 5.111 and earlier) - UNAS-2, UNAS-4, UNAS-Pro, UNAS-Pro-4, and UNAS-Pro-8 (version 5.116 and earlier) - Express (version 4.8.14 and earlier) CVSS Score: 8.6 (High) CVE: CVE-2026-47368 Vulnerability 3: Privilege Escalation Affected Products: - UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, IDW, UDR, UDR7, UDR-5G, Express 7, UCK, UCKP, UCK-Enterprise, UNVR, UNVR-Pro, UNVR-Instant, ENVR, ENVR-Core, UNVR-G2, UNVR-G2-Pro, UCO-Ultra, UCO-Max, UCO-Industrial, and UCO-Fiber (version 5.112 and earlier) - UniFi OS Server (version 5.8.8 and earlier) - UDM-Beast (version 5.111 and earlier) - UNAS-2, UNAS-4, UNAS-Pro, UNAS-Pro-4, and UNAS-Pro-8 (version 5.116 and earlier) - Express (version 4.8.14 and earlier) CVSS Score: 9.9 (Critical) CVE: CVE-2026-47369 Vulnerability 4: Command Injection Affected Products: - UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, IDW, UDR, UDR7, UDR-5G, Express 7, UCK, UCKP, UCK-Enterprise, UNVR, UNVR-Pro, UNVR-Instant, ENVR, ENVR-Core, UNVR-G2, UNVR-G2-Pro, UCO-Ultra, UCO-Max, UCO-Industrial, and UCO-Fiber (version 5.112 and earlier) - UniFi OS Server (version 5.8.8 and earlier) - UDM-Beast (version 5.111 and earlier) - UNAS-2, UNAS-4, UNAS-Pro, UNAS-Pro-4, and UNAS-Pro-8 (version 5.116 and earlier) - Express (version 4.8.14 and earlier) CVSS Score: 9.9 (Critical) CVE: CVE-2026-47370 Vulnerability 5: Access Control Affected Products: - UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, IDW, UDR, UDR7, UDR-5G, Express 7, UCO-Ultra, UCO-Max, UCO-Industrial, and UCO-Fiber (version 5.112 and earlier) - UDM-Beast (version 5.111 and earlier) CVSS Score: 8.1 (High) CVE: CVE-2026-48610 Remediation UID Enterprise Agent: Update to version 1.61.4 or later. Other Products: Update to the latest version for each respective product, as specified in the remediation recommendations for each vulnerability. POC Code or Exploit Code No specific POC code or exploit code is provided in this advisory.

Goal Reached Thanks to every supporter — we hit 100%!

Ubiquiti UniFi Security Bulletin: Command Injection, LPE, and Access Control Vulnerabilities (CVE-2026-47367/47368/47369/47370/48610)