CVE-2026-36851

CVE-2026-36851 路径遍历/任意文件读取漏洞，存在于 UnPoller v2.33.0 中，通过 file:// 密码前缀触发。文件内容从磁盘读取并在认证期间传输到配置的 UniFi 控制器 URL。 | ---|--- CVE 编号| CVE-2026-36851 产品| UnPoller v2.33.0（早期版本可能受影响） 弱点| CWE-22（路径遍历）、CWE-20（输入验证不当） CVSS 3.1| 7.5 高 — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 报告者| Hector Diaz 概述 UnPoller...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

UnPoller v2.33.0 contains a path traversal vulnerability in its password field. In pkg/inputunifi/input.go, any value prefixed with file:// is passed to os.ReadFile() without path validation, allowing an attacker with write access to the up.conf file to specify any readable file on the system. Th...

EUVD-2026-66662

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...