Path Traversal Vulnerability in UniFi OS Devices by Ubiquiti
CVE-2026-34909
10CRITICAL
What is CVE-2026-34909?
A Path Traversal vulnerability exists in Ubiquiti's UniFi OS devices, allowing attackers with network access to navigate the file system and potentially manipulate sensitive files. This could lead to unauthorized account access and compromise the overall security of the device. Users are advised to update their UniFi OS to the latest version as a preventive measure against this vulnerability. For further information and guidance, please refer to Ubiquiti's security advisory.
Affected Version(s)
EFG 0 < 5.1.12
ENVR 0 < 5.1.12
ENVR-Core 0 < 5.1.12
