Path Traversal Vulnerability in UniFi Network Application by Ubiquiti

CVE-2026-54406

What is CVE-2026-54406?

A path traversal vulnerability exists in self-hosted versions of the UniFi Network Application, enabling a malicious actor with network access and elevated privileges to potentially escalate their write permissions on the host device. This could lead to unauthorized data modification and security breaches within the network environment. It is crucial for users to assess their systems and apply necessary security updates to mitigate this risk.

References