Approved changes feed: RSS · Atom

cpe:2.3:a:ubiquiti_inc:udm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUbiquiti Inc (c88e098a-16be-5454-a579-272623ec9dad)
ProductUdm (0f3e3529-aafc-5ad1-8bf0-d381053722e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48610 vulnerable 2026-07-29 00:55:01.555705 Details available
HIGH (8.1)
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Published: 2026-06-12T02:27:43.468Z
Updated: 2026-06-12T11:48:09.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47370 vulnerable 2026-07-29 00:55:00.196074 Details available
CRITICAL (9.9)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.642Z
Updated: 2026-06-13T03:55:51.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47369 vulnerable 2026-07-29 00:55:00.193875 Details available
CRITICAL (9.9)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.612Z
Updated: 2026-06-13T03:55:49.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47368 vulnerable 2026-07-29 00:55:00.153533 Details available
HIGH (8.6)
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.525Z
Updated: 2026-06-12T14:30:10.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34911 vulnerable 2026-06-08 07:59:13.324529 Details available
HIGH (7.7)
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Published: 2026-05-22T00:43:49.189Z
Updated: 2026-05-22T12:37:48.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34910 vulnerable 2026-06-08 07:59:13.322195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34909 vulnerable 2026-06-08 07:59:13.319857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34908 vulnerable 2026-06-08 07:59:13.294096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23091 vulnerable 2026-06-08 07:10:55.172422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.