CVE-2026-34911: A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the…

PriorityP346high7.7CVSS 3.1

AVNACLPRLUINSCCHINAN

EPSS

0.68%

47.8th percentile

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.

Affected

62 ranges· showing 25

Vendor	Product	Version range	Fixed in
ubiquiti_inc	efg	< 5.1.12	5.1.12
ubiquiti_inc	envr	< 5.1.12	5.1.12
ubiquiti_inc	envr-core	< 5.1.12	5.1.12
ubiquiti_inc	express_7	< 5.1.12	5.1.12
ubiquiti_inc	ucg-fiber	< 5.1.12	5.1.12
ubiquiti_inc	ucg-industrial	< 5.1.12	5.1.12
ubiquiti_inc	ucg-max	< 5.1.12	5.1.12
ubiquiti_inc	ucg-ultra	< 5.1.12	5.1.12
ubiquiti_inc	uck	< 5.1.12	5.1.12
ubiquiti_inc	uck-enterprise	< 5.1.12	5.1.12
ubiquiti_inc	uckp	< 5.1.12	5.1.12
ubiquiti_inc	udm	< 5.1.12	5.1.12
ubiquiti_inc	udm-beast	< 5.1.11	5.1.11
ubiquiti_inc	udm-pro	< 5.1.12	5.1.12
ubiquiti_inc	udm-pro-max	< 5.1.12	5.1.12
ubiquiti_inc	udm-se	< 5.1.12	5.1.12
ubiquiti_inc	udr	< 5.1.12	5.1.12
ubiquiti_inc	udr-5g	< 5.1.12	5.1.12
ubiquiti_inc	udr7	< 5.1.12	5.1.12
ubiquiti_inc	udw	< 5.1.12	5.1.12
ubiquiti_inc	unas-2	< 5.1.10	5.1.10
ubiquiti_inc	unas-4	< 5.1.10	5.1.10
ubiquiti_inc	unas-pro	< 5.1.10	5.1.10
ubiquiti_inc	unas-pro-4	< 5.1.10	5.1.10
ubiquiti_inc	unas-pro-8	< 5.1.10	5.1.10

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.