CVE-2026-54402

🗓️ 02 Jul 2026 15:17:03Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

CVE-2026-54402: A network attacker with low privileges can exploit improper input validation in UniFi OS to inject commands.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-54402	2 Jul 202614:49	–	attackerkb
Circl	CVE-2026-54402	2 Jul 202618:19	–	circl
CVE	CVE-2026-54402	2 Jul 202614:49	–	cve
Cvelist	CVE-2026-54402	2 Jul 202614:49	–	cvelist
EUVD	EUVD-2026-41391	2 Jul 202614:49	–	euvd
NCSC	Vulnerabilities found in UniFi products from Ubiquiti Networks	7 Jul 202607:04	–	ncsc
Positive Technologies	PT-2026-55238	2 Jul 202600:00	–	ptsecurity
The Hacker News	Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS	8 Jul 202614:38	–	thn
Vulnrichment	CVE-2026-54402	2 Jul 202614:49	–	vulnrichment

NVD

Node

ui unifi_os_serverRange≤5.1.15

Node

AND

ui unifi_dream_machine_firmwareRange≤5.1.15

ui unifi_dream_machineMatch-

Node

AND

ui unifi_dream_machine_pro_firmwareRange≤5.1.15

ui unifi_dream_machine_proMatch-

Node

AND

ui unifi_dream_machine_special_edition_firmwareRange≤5.1.15

ui unifi_dream_machine_special_editionMatch-

Node

AND

ui unifi_dream_machine_pro_max_firmwareRange≤5.1.15

ui unifi_dream_machine_pro_maxMatch-

Node

AND

ui unifi_dream_machine_beast_firmwareRange≤5.1.15

ui unifi_dream_machine_beastMatch-

Node

AND

ui enterprise_fortress_gateway_firmwareRange≤5.1.15

ui enterprise_fortress_gatewayMatch-

Node

AND

ui unifi_dream_router_firmwareRange≤5.1.15

ui unifi_dream_routerMatch-

Node

AND

ui unifi_dream_wall_firmwareRange≤5.1.15

ui unifi_dream_wallMatch-

Node

AND

ui unifi_dream_router_7_firmwareRange≤5.1.15

ui unifi_dream_router_7Match-

Node

AND

ui unifi_express_7_firmwareRange≤5.1.15

ui unifi_express_7Match-

Node

AND

ui unifi_cloudkey_firmwareRange≤5.1.15

ui unifi_cloudkeyMatch-

Node

AND

ui unifi_cloud_key_plus_firmwareRange≤5.1.15

ui unifi_cloud_key_plusMatch-

Node

AND

ui unifi_cloudkey_enterprise_firmwareRange≤5.1.15

ui unifi_cloudkey_enterpriseMatch-

Node

AND

ui unifi_network_video_recorder_firmwareRange≤5.1.15

ui unifi_network_video_recorderMatch-

Node

AND

ui unifi_network_video_recorder_pro_firmwareRange≤5.1.15

ui unifi_network_video_recorder_proMatch-

Node

AND

ui unifi_network_video_recorder_instant_firmwareRange≤5.1.15

ui unifi_network_video_recorder_instantMatch-

Node

AND

ui enterprise_network_video_recorder_core_firmwareRange≤5.1.15

ui enterprise_network_video_recorder_coreMatch-

Node

AND

ui unifi_network_video_recorder_g2_firmwareRange≤5.1.15

ui unifi_network_video_recorder_g2Match-

Node

AND

ui unifi_network_video_recorder_g2_pro_firmwareRange≤5.1.15

ui unifi_network_video_recorder_g2_proMatch-

Node

AND

ui unifi_cloud_gateway_ultra_firmwareRange≤5.1.15

ui unifi_cloud_gateway_ultraMatch-

Node

AND

ui unifi_cloud_gateway_max_firmwareRange≤5.1.15

ui unifi_cloud_gateway_maxMatch-

Node

AND

ui unifi_cloud_gateway_industrial_firmwareRange≤5.1.15

ui unifi_cloud_gateway_industrialMatch-

Node

AND

ui unifi_cloud_gateway_fiber_firmwareRange≤5.1.15

ui unifi_cloud_gateway_fiberMatch-

Node

AND

ui unas_2_firmwareRange≤5.1.16

ui unas_2Match-

Node

AND

ui unas_4_firmwareRange≤5.1.16

ui unas_4Match-

Node

AND

ui unas_pro_firmwareRange≤5.1.16

ui unas_proMatch-

Node

AND

ui unas_pro_4_firmwareRange≤5.1.16

ui unas_pro_4Match-

Node

AND

ui unas_pro_8_firmwareRange≤5.1.16

ui unas_pro_8Match-

Node

AND

ui enterprise_firewall_core_firmwareRange≤5.1.18

ui enterprise_firewall_coreMatch-

Node

AND

ui unifi_dream_router_5g_max_firmwareRange≤5.1.15

ui unifi_dream_router_5g_maxMatch-

Node

AND

ui enterprise_network_video_recorder_firmwareRange≤5.1.15

ui enterprise_network_video_recorderMatch-

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

10 Jul 2026 02:49Current

CVSS 3.18.8 - 9.9

EPSS0.00872

network attack low privileges improper input validation UniFi OS command injection host device