Approved changes feed: RSS · Atom

cpe:2.3:a:ubiquiti_inc:dream_machines:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUbiquiti Inc (c88e098a-16be-5454-a579-272623ec9dad)
ProductDream Machines (305d0751-808b-5a7e-af2b-1635575eddd6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-55116 vulnerable 2026-07-29 01:00:28.338255 Details available
CRITICAL (9)
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Published: 2026-07-02T14:50:48.820Z
Updated: 2026-07-02T15:51:11.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-55112 vulnerable 2026-07-29 01:00:28.329515 Details available
HIGH (7.5)
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
Published: 2026-07-02T14:50:48.656Z
Updated: 2026-07-02T15:51:35.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-55110 vulnerable 2026-07-29 01:00:28.323882 Details available
HIGH (7.5)
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
Published: 2026-07-02T14:49:16.794Z
Updated: 2026-07-02T15:52:20.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54404 vulnerable 2026-07-29 01:00:27.764599 Details available
HIGH (8.8)
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
Published: 2026-07-02T14:49:16.757Z
Updated: 2026-07-03T03:56:09.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54403 vulnerable 2026-07-29 01:00:27.763454 Details available
HIGH (8.6)
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.
Published: 2026-07-02T14:49:16.633Z
Updated: 2026-07-02T16:09:42.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54402 vulnerable 2026-07-29 01:00:27.762551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54401 vulnerable 2026-07-29 01:00:27.741943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.