CVE-2026-34911
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlyin…
Published May 22, 2026 · updated Jul 23, 2026 · ui unifi os server
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 22, 2026 · NIST NVD
Detected
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Jul 23, 2026 · NIST NVD
Updated
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Affected
- cpe ui/enterprise fortress gateway firmwareversion unspecified
- cpe ui/unifi cloud gateway industrial firmwareversion unspecified
- cpe ui/unifi dream machine firmwareversion unspecified
- cpe ui/unifi dream machine pro firmwareversion unspecified
- cpe ui/unifi dream machine pro max firmwareversion unspecified
- cpe ui/unifi dream machine special edition firmwareversion unspecified
- cpe ui/unifi dream router 7 firmwareversion unspecified
- cpe ui/unifi dream router firmwareversion unspecified
- cpe ui/unifi dream wall firmwareversion unspecified
- cpe ui/unifi express 7 firmwareversion unspecified
- cpe ui/unifi network video recorder firmwareversion unspecified
- cpe ui/unifi os serverversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-34911
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-34911
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
nvd.nist.gov