Advisories · Technology

Ubiquiti Inc Enterprise Firewall Core.

Every CVE that names Ubiquiti Inc Enterprise Firewall Core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77550 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

CRLF injection in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Other injection
Not analysed yet 26 Aug 2026
CVE-2026-77549 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

CRLF injection in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Other injection
Not analysed yet 26 Aug 2026
CVE-2026-77545 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Active debug code in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- CWE-489
Not analysed yet 26 Aug 2026
CVE-2026-77536 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Broken access control
Not analysed yet 26 Aug 2026
CVE-2026-77534 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper access control in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Broken access control
Not analysed yet 26 Aug 2026
CVE-2026-55116 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Improper access control in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Fortress Gateway
- Broken access control
Not analysed yet 2 Jul 2026
CVE-2026-54401 CVE record

CVSS 7.7 High

Server-side request forgery in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Server-side request forgery (SSRF)
Not analysed yet 2 Jul 2026
CVE-2026-54402 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Improper input validation in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- CWE-20
Not analysed yet 2 Jul 2026
CVE-2026-55110 CVE record

CVSS 7.5 High

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that…
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- CWE-942
Not analysed yet 2 Jul 2026
CVE-2026-54404 CVE record

CVSS 8.8 High

SQL injection in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- SQL injection
Not analysed yet 2 Jul 2026
CVE-2026-54403 CVE record

CVSS 8.6 High

Path traversal in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Path traversal
Not analysed yet 2 Jul 2026