PT-2026-55246 · Ubiquiti+1 · Cloud Gateways+40
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cloud Gateways
Cloud Keys
Dream Machines
Dream Routers
Dream Wall
Enterprise Firewall Core
Enterprise Fortress Gateway
Enterprise Video Recorders
Express 7
Network Attached Storage
Network Video Recorders
Unifi Os Server
Enterprise Firewall Core Firmware
Enterprise Fortress Gateway Firmware
Enterprise Network Video Recorder Core Firmware
Enterprise Network Video Recorder Firmware
Unas 2 Firmware
Unas 4 Firmware
Unas Pro 4 Firmware
Unas Pro 8 Firmware
Unas Pro Firmware
Unifi Cloud Gateway Fiber Firmware
Unifi Cloud Gateway Industrial Firmware
Unifi Cloud Gateway Max Firmware
Unifi Cloud Gateway Ultra Firmware
Unifi Cloud Key Plus Firmware
Unifi Cloudkey Enterprise Firmware
Unifi Cloudkey Firmware
Unifi Dream Machine Beast Firmware
Unifi Dream Machine Pro Firmware
Unifi Dream Machine Pro Max Firmware
Unifi Dream Machine Special Edition Firmware
Unifi Dream Router 7 Firmware
Unifi Dream Router Firmware
Unifi Dream Wall Firmware
Unifi Express 7 Firmware
Unifi Network Video Recorder Firmware
Unifi Network Video Recorder G2 Firmware
Unifi Network Video Recorder G2 Pro Firmware
Unifi Network Video Recorder Instant Firmware
Unifi Network Video Recorder Pro Firmware