CVE-2026-54402

🗓️ 02 Jul 2026 14:49:17Reported by hackeroneType

CVE-2026-54402: Low-privilege network attackers can inject commands in UniFi OS via improper input validation.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-54402	2 Jul 202614:49	–	attackerkb
Circl	CVE-2026-54402	2 Jul 202618:19	–	circl
Cvelist	CVE-2026-54402	2 Jul 202614:49	–	cvelist
EUVD	EUVD-2026-41391	2 Jul 202614:49	–	euvd
NVD	CVE-2026-54402	2 Jul 202615:17	–	nvd
Positive Technologies	PT-2026-55238	2 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-54402	2 Jul 202614:49	–	vulnrichment

Vulners

Node

ubiquiti_inc unifi_os_serverRange≤5.1.19

ubiquiti_inc dream_machinesRange≤5.1.19

ubiquiti_inc enterprise_fortress_gatewayRange≤5.1.19

ubiquiti_inc dream_wallRange≤5.1.19

ubiquiti_inc dream_routersRange≤5.1.19

ubiquiti_inc express_7Range≤5.1.19

ubiquiti_inc cloud_keysRange≤5.1.19

ubiquiti_inc network_video_recordersRange≤5.1.19

ubiquiti_inc enterprise_video_recordersRange≤5.1.19

ubiquiti_inc cloud_gatewaysRange≤5.1.19

ubiquiti_inc network_attached_storageRange≤5.1.19

ubiquiti_inc enterprise_firewall_coreRange≤5.1.19

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "UniFi OS Server",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Dream Machines",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Enterprise Fortress Gateway",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Dream Wall",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Dream Routers",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Express 7",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Cloud Keys",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Network Video Recorders",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Enterprise Video Recorders",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Cloud Gateways",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Network Attached Storage",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "Enterprise Firewall Core",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "5.1.19",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

02 Jul 2026 16:54Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.9

SSVC

CWE-20