CVE-2015-9266

🗓️ 05 Sep 2018 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 93 Views

The web management interface of Ubiquiti airMAX, airFiber, airGateway, and EdgeSwitch XP is vulnerable to unauthorized file upload and directory traversal

Reporter	Title	Published	Views	Family All 6
circl	CVE-2015-9266	15 Apr 201600:00	–	circl
checkpoint_advisories	Ubiquiti Multiple Products Arbitrary File Upload (CVE-2015-9266)	29 Sep 202100:00	–	checkpoint_advisories
cvelist	CVE-2015-9266 Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload	5 Sep 201821:00	–	cvelist
hackerone	Ubiquiti Inc.: Arbritrary file Upload on AirMax	1 Jul 201513:59	–	hackerone
nvd	CVE-2015-9266	5 Sep 201820:29	–	nvd
prion	Directory traversal	5 Sep 201820:29	–	prion

NVD

Node

AND

ui airmax_ac_firmwareMatch7.1.3

ui airmax_acMatch-

Node

AND

ui airmax_m_xm_firmwareRange<5.6.2

ui airmax_m_xmMatch-

Node

AND

ui airmax_m_xw_firmwareRange<5.6.2

ui airmax_m_xwMatch-

Node

AND

ui airmax_m_ti_firmwareRange<5.6.2

ui airmax_m_tiMatch-

Node

AND

ui airgateway_firmwareRange<1.15

ui airgatewayMatch-

Node

AND

ui airfiber_af24_firmwareRange<2.2.1

ui airfiber_af24Match-

Node

AND

ui airfiber_af24hd_firmwareRange<2.2.1

ui airfiber_af24hdMatch-

Node

AND

ui af5x_firmwareRange<3.0.2.1

ui af5xMatch-

Node

AND

ui af5_firmwareRange<2.2.1

ui af5Match-

Node

AND

ubnt airos_4_xs2Range<4.0.4

ubnt airos_4_xs5Range<4.0.4

ui airmax_acMatch-

ui airmax_mMatch-

Node

AND

ubnt edgeswitch_xp_firmwareRange<1.3.2

ui edgeswitch_xpMatch-

Source	Link
rapid7	www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload
hackerone	www.hackerone.com/reports/73480
exploit-db	www.exploit-db.com/exploits/39853/
exploit-db	www.exploit-db.com/exploits/39701/
community	www.community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940
community	www.community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949
community	www.community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494

17 Jun 2026 00:36Current

9.7High risk

Vulners AI Score9.7

CVSS 39.8

CVSS 210

EPSS0.73999

CWE-22