Approved changes feed: RSS · Atom

cpe:2.3:a:ubiquiti_inc:express:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUbiquiti Inc (c88e098a-16be-5454-a579-272623ec9dad)
ProductExpress (b9c679fc-e7dd-5f52-aebe-bef71d12e82e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-47370 vulnerable 2026-07-29 00:55:00.195937 Details available
CRITICAL (9.9)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.642Z
Updated: 2026-06-13T03:55:51.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47369 vulnerable 2026-07-29 00:55:00.193850 Details available
CRITICAL (9.9)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.612Z
Updated: 2026-06-13T03:55:49.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47368 vulnerable 2026-07-29 00:55:00.152486 Details available
HIGH (8.6)
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
Published: 2026-06-12T02:27:43.525Z
Updated: 2026-06-12T14:30:10.779Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.