Approved changes feed: RSS · Atom

cpe:2.3:a:ubiquiti_inc:unas-pro-4:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUbiquiti Inc (c88e098a-16be-5454-a579-272623ec9dad)
ProductUnas Pro 4 (6cb0c955-6898-5f0d-8e67-fc94fb286f61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-47370 vulnerable 2026-07-29 00:55:00.197396 Details available
CRITICAL (9.9)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.642Z
Updated: 2026-06-13T03:55:51.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47369 vulnerable 2026-07-29 00:55:00.195069 Details available
CRITICAL (9.9)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.612Z
Updated: 2026-06-13T03:55:49.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47368 vulnerable 2026-07-29 00:55:00.186594 Details available
HIGH (8.6)
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.525Z
Updated: 2026-06-12T14:30:10.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34911 vulnerable 2026-06-08 07:59:13.325858 Details available
HIGH (7.7)
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
Published: 2026-05-22T00:43:49.189Z
Updated: 2026-05-22T12:37:48.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34910 vulnerable 2026-06-08 07:59:13.323574 Details available
CRITICAL (10)
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
Published: 2026-05-22T00:43:49.096Z
Updated: 2026-06-24T03:55:52.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34909 vulnerable 2026-06-08 07:59:13.321244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34908 vulnerable 2026-06-08 07:59:13.308318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.