CVE-2026-48610: Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices…

PriorityP351high8.1CVSS 3.1

AVNACHPRNUINSUCHIHAH

EPSS

0.26%

17.7th percentile

Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
ubiquiti_inc	efg	< 5.1.15	5.1.15
ubiquiti_inc	express_7	< 5.1.15	5.1.15
ubiquiti_inc	ucg-fiber	< 5.1.15	5.1.15
ubiquiti_inc	ucg-industrial	< 5.1.15	5.1.15
ubiquiti_inc	ucg-max	< 5.1.15	5.1.15
ubiquiti_inc	ucg-ultra	< 5.1.15	5.1.15
ubiquiti_inc	udm	< 5.1.15	5.1.15
ubiquiti_inc	udm-beast	< 5.1.15	5.1.15
ubiquiti_inc	udm-pro	< 5.1.15	5.1.15
ubiquiti_inc	udm-pro-max	< 5.1.15	5.1.15
ubiquiti_inc	udm-se	< 5.1.15	5.1.15
ubiquiti_inc	udr	< 5.1.15	5.1.15
ubiquiti_inc	udr-5g	< 5.1.15	5.1.15
ubiquiti_inc	udr7	< 5.1.15	5.1.15
ubiquiti_inc	udw	< 5.1.15	5.1.15

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.