Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-54401 Details
Description
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
A Server-Side Request Forgery (SSRF) vulnerability has been identified in Ubiquiti UniFi OS devices. This vulnerability allows a malicious actor with low privileges and network access to escalate privileges within the affected UniFi OS instances.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 2, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ui unifi os server | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine | All versions |
CPE
Remediation
| |
| ui unifi dream machine pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine pro | All versions |
CPE
Remediation
| |
| ui unifi dream machine special edition firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine special edition | All versions |
CPE
Remediation
| |
| ui unifi dream machine pro max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine pro max | All versions |
CPE
Remediation
| |
| ui unifi dream machine beast firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine beast | All versions |
CPE
Remediation
| |
| ui enterprise fortress gateway firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise fortress gateway | All versions |
CPE
Remediation
| |
| ui unifi dream router firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router | All versions |
CPE
Remediation
| |
| ui unifi dream wall firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream wall | All versions |
CPE
Remediation
| |
| ui unifi dream router 7 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router 7 | All versions |
CPE
Remediation
| |
| ui unifi express 7 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi express 7 | All versions |
CPE
Remediation
| |
| ui unifi cloudkey firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloudkey | All versions |
CPE
Remediation
| |
| ui unifi cloud key plus firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud key plus | All versions |
CPE
Remediation
| |
| ui unifi cloudkey enterprise firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloudkey enterprise | All versions |
CPE
Remediation
| |
| ui unifi network video recorder firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder | All versions |
CPE
Remediation
| |
| ui unifi network video recorder pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder pro | All versions |
CPE
Remediation
| |
| ui unifi network video recorder instant firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder instant | All versions |
CPE
Remediation
| |
| ui enterprise network video recorder firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise network video recorder | All versions |
CPE
Remediation
| |
| ui enterprise network video recorder core firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise network video recorder core | All versions |
CPE
Remediation
| |
| ui unifi network video recorder g2 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder g2 | All versions |
CPE
Remediation
| |
| ui unifi network video recorder g2 pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder g2 pro | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway ultra firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway ultra | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway max | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway industrial firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway industrial | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway fiber firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway fiber | All versions |
CPE
Remediation
| |
| ui unas 2 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas 2 | All versions |
CPE
Remediation
| |
| ui unas 4 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas 4 | All versions |
CPE
Remediation
| |
| ui unas pro firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas pro | All versions |
CPE
Remediation
| |
| ui unas pro 4 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas pro 4 | All versions |
CPE
Remediation
| |
| ui unas pro 8 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas pro 8 | All versions |
CPE
Remediation
| |
| ui enterprise firewall core firmware | <= 5.1.18 |
CPE
Remediation
| |
| ui enterprise firewall core | All versions |
CPE
Remediation
| |
| ui unifi dream router 5g max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router 5g max | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | Initial Analysis | [email protected] |
| Jul 2, 2026 | CVE Modified | CISA-ADP |
| Jul 2, 2026 | New CVE Received | [email protected] |