A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
History

Sat, 01 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Enables Privilege Escalation on Ubiquiti UniFi OS Devices

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Server‑Side Request Forgery in Ubiquiti UniFi OS Devices

Fri, 24 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Server‑Side Request Forgery in Ubiquiti UniFi OS Devices

Wed, 22 Jul 2026 13:45:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Enabling Privilege Escalation on UniFi OS Devices

Fri, 17 Jul 2026 11:00:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Enabling Privilege Escalation on UniFi OS Devices

Wed, 15 Jul 2026 10:00:00 +0000

Type Values Removed Values Added
Title Server-Side Request Forgery in Ubiquiti UniFi OS Devices Enables Privilege Escalation

Mon, 13 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Title Server-Side Request Forgery in Ubiquiti UniFi OS Devices Enables Privilege Escalation

Mon, 13 Jul 2026 03:15:00 +0000

Type Values Removed Values Added
Title SSRF Enables Privilege Escalation on Ubiquiti UniFi OS Devices

Sun, 12 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title SSRF Enables Privilege Escalation on Ubiquiti UniFi OS Devices

Sat, 11 Jul 2026 06:15:00 +0000

Type Values Removed Values Added
Title SSRF Permits Privilege Escalation on Ubiquiti UniFi OS Devices

Fri, 10 Jul 2026 03:15:00 +0000

Type Values Removed Values Added
Title SSRF Permits Privilege Escalation on Ubiquiti UniFi OS Devices

Wed, 08 Jul 2026 18:00:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Enables Privilege Escalation on Ubiquiti UniFi OS Devices

Wed, 08 Jul 2026 00:45:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Enables Privilege Escalation on Ubiquiti UniFi OS Devices

Tue, 07 Jul 2026 13:00:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Allowing Privilege Escalation in Ubiquiti UniFi OS Devices

Mon, 06 Jul 2026 11:15:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Allowing Privilege Escalation in Ubiquiti UniFi OS Devices

Mon, 06 Jul 2026 04:45:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Leading to Privilege Escalation in Ubiquiti UniFi OS

Sun, 05 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Leading to Privilege Escalation in Ubiquiti UniFi OS

Sun, 05 Jul 2026 12:30:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery in Ubiquiti UniFi OS Enables Privilege Escalation

Sun, 05 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery in Ubiquiti UniFi OS Enables Privilege Escalation

Sat, 04 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Title SSRF Exploit Allows Privilege Escalation in UniFi OS Devices

Sat, 04 Jul 2026 10:15:00 +0000

Type Values Removed Values Added
Title SSRF Exploit Allows Privilege Escalation in UniFi OS Devices

Sat, 04 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Allows Local Privilege Escalation in UniFi OS Devices

Fri, 03 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Title Server‑Side Request Forgery Allows Local Privilege Escalation in UniFi OS Devices

Fri, 03 Jul 2026 10:30:00 +0000

Type Values Removed Values Added
Title SSRF Exploitation Enables Privilege Escalation on UniFi OS Devices

Thu, 02 Jul 2026 23:45:00 +0000

Type Values Removed Values Added
Title SSRF Exploitation Enables Privilege Escalation on UniFi OS Devices

Thu, 02 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 02 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
Description A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published:

Updated: 2026-07-02T15:51:58.264Z

Reserved: 2026-06-13T15:00:00.604Z

Link: CVE-2026-54401

cve-icon Vulnrichment

Updated: 2026-07-02T15:48:50.443Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-02T15:17:03.730

Modified: 2026-07-10T02:50:13.673

Link: CVE-2026-54401

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-01T21:30:06Z