CVE-2026-34911

🗓️ 22 May 2026 02:16:34Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 17 Views

Path traversal flaw in UniFi OS allows low-privilege network access to underlying files for sensitive data.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-34911	22 May 202600:43	–	attackerkb
BDU FSTEC	The vulnerability of the UniFi OS Server network management center arises from incorrect restrictions on the path to the directory, allowing unauthorized access by intruders to protected information.	4 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-34911	22 May 202604:00	–	circl
CNNVD	Ubiquiti UniFi OS Server 安全漏洞	22 May 202600:00	–	cnnvd
CVE	CVE-2026-34911	22 May 202600:43	–	cve
Cvelist	CVE-2026-34911	22 May 202600:43	–	cvelist
EUVD	EUVD-2026-31387	22 May 202600:43	–	euvd
Positive Technologies	PT-2026-42660	21 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-34911	5 Jun 202619:21	–	redhatcve
Vulnrichment	CVE-2026-34911	22 May 202600:43	–	vulnrichment

NVD

Node

ui unifi_os_serverRange<5.0.8

Node

AND

ui unifi_cloud_gateway_industrial_firmwareRange<5.1.12

ui unifi_cloud_gateway_industrialMatch-

Node

AND

ui unifi_dream_machine_firmwareRange<5.1.12

ui unifi_dream_machineMatch-

Node

AND

ui unifi_dream_machine_pro_firmwareRange<5.1.12

ui unifi_dream_machine_proMatch-

Node

AND

ui unifi_dream_machine_special_edition_firmwareRange<5.1.12

ui unifi_dream_machine_special_editionMatch-

Node

AND

ui unifi_dream_machine_pro_max_firmwareRange<5.1.12

ui unifi_dream_machine_pro_maxMatch-

Node

AND

ui enterprise_fortress_gateway_firmwareRange<5.1.12

ui enterprise_fortress_gatewayMatch-

Node

AND

ui unifi_dream_wall_firmwareRange<5.1.12

ui unifi_dream_wallMatch-

Node

AND

ui unifi_dream_router_firmwareRange<5.1.12

ui unifi_dream_routerMatch-

Node

AND

ui unifi_dream_router_7_firmwareRange<5.1.12

ui unifi_dream_router_7Match-

Node

AND

ui unifi_express_7_firmwareRange<5.1.12

ui unifi_express_7Match-

Node

AND

ui unifi_network_video_recorder_firmwareRange<5.1.12

ui unifi_network_video_recorderMatch-

Node

AND

ui unifi_network_video_recorder_pro_firmwareRange<5.1.12

ui unifi_network_video_recorder_proMatch-

Node

AND

ui unifi_network_video_recorder_instant_firmwareRange<5.1.12

ui unifi_network_video_recorder_instantMatch-

Node

AND

ui enterprise_network_video_recorder_firmwareRange<5.1.12

ui enterprise_network_video_recorderMatch-

Node

AND

ui unifi_cloud_gateway_ultra_firmwareRange<5.1.12

ui unifi_cloud_gateway_ultraMatch-

Node

AND

ui unifi_cloud_gateway_max_firmwareRange<5.1.12

ui unifi_cloud_gateway_maxMatch-

Node

AND

ui unifi_cloud_gateway_fiber_firmwareRange<5.1.12

ui unifi_cloud_gateway_fiberMatch-

Node

AND

ui unifi_dream_router_5g_max_firmwareRange<5.1.12

ui unifi_dream_router_5g_maxMatch-

Node

AND

ui enterprise_network_video_recorder_core_firmwareRange<5.1.12

ui enterprise_network_video_recorder_coreMatch-

Node

AND

ui unifi_cloud_key_plus_firmwareRange<5.1.12

ui unifi_cloud_key_plusMatch-

Node

AND

ui unifi_cloudkey_firmwareRange<5.1.12

ui unifi_cloudkeyMatch-

Node

AND

ui unifi_cloudkey_enterprise_firmwareRange<5.1.12

ui unifi_cloudkey_enterpriseMatch-

Node

AND

ui unifi_network_video_recorder_g2_firmwareRange<5.1.12

ui unifi_network_video_recorder_g2Match-

Node

AND

ui unifi_network_video_recorder_g2_pro_firmwareRange<5.1.12

ui unifi_network_video_recorder_g2_proMatch-

Node

AND

ui unifi_dream_machine_beast_firmwareRange<5.1.11

ui unifi_dream_machine_beastMatch-

Node

AND

ui unas_2_firmwareRange<5.1.10

ui unas_2Match-

Node

AND

ui unas_4_firmwareRange<5.1.10

ui unas_4Match-

Node

AND

ui unas_pro_firmwareRange<5.1.10

ui unas_proMatch-

Node

AND

ui unas_pro_4_firmwareRange<5.1.10

ui unas_pro_4Match-

Node

AND

ui unas_pro_8_firmwareRange<5.1.10

ui unas_pro_8Match-

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b

23 Jul 2026 16:10Current

CVSS 3.17.7

EPSS0.0068

path traversal UniFi OS network access low privileges underlying files sensitive data