UI
UI Unifi Cloud KEY Plus Firmware: vulnerabilidades y CVE
UI Unifi Cloud KEY Plus Firmware tiene 9 vulnerabilidades publicadas, 9 de ellas en los últimos 12 meses. 3 son críticas y 3 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses9
Críticas3
Explotadas activamente3
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-34909 | Crítica (10) | 1.8% | ⚠ Explotación activa | 22 may 2026 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account. |
| CVE-2026-34910 | Crítica (10) | 46% | ⚠ Explotación activa | 22 may 2026 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. |
| CVE-2026-34908 | Crítica (10) | 15% | ⚠ Explotación activa | 22 may 2026 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-55110 | Media (6.1) | 0.27% | — | 2 jul 2026 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session. |
| CVE-2026-54404 | Alta (8.8) | 0.49% | — | 2 jul 2026 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances. |
| CVE-2026-54403 | Alta (8.6) | 0.77% | — | 2 jul 2026 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances. |
| CVE-2026-54402 | Alta (8.8) | 1.8% | — | 2 jul 2026 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device. |
| CVE-2026-54401 | Alta (8.8) | 0.43% | — | 2 jul 2026 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances. |
| CVE-2026-34911 | Alta (7.7) | 0.59% | — | 22 may 2026 | A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain… |
| CVE-2026-34910 | Crítica (10) | 46% | ⚠ Explotación activa | 22 may 2026 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. |
| CVE-2026-34909 | Crítica (10) | 1.8% | ⚠ Explotación activa | 22 may 2026 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account. |
| CVE-2026-34908 | Crítica (10) | 15% | ⚠ Explotación activa | 22 may 2026 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. |
Otros productos de UI
Unifi Protect · 21Unifi Network Application · 15Unifi OS · 12Unifi Dream Machine PRO Firmware · 11Unifi OS Server · 11Unifi Cloud Gateway MAX Firmware · 10Unifi Cloud Gateway Industrial Firmware · 10Unifi Dream Router 7 Firmware · 10Enterprise Network Video Recorder Firmware · 10Unifi Dream Machine PRO MAX Firmware · 10Enterprise Network Video Recorder Core Firmware · 10Unifi Cloudkey Firmware · 10