PT-2026-55242 · Ubiquiti · Unifi Network Application
CVE-2026-54406
·
Published
2026-07-02
·
Updated
2026-07-02
CVSS v3.1
8.7
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
UniFi Network Application (affected versions not specified)
Description
Self-hosted instances are subject to a Path Traversal issue. A malicious actor with network access and high privileges can exploit this to escalate write permissions on the host device. Path Traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Unifi Network Application