CVE-2026-47368: Path Traversal
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to UniFi OS devices and management interfaces via firewall/ACLs or network segmentation (allow only trusted administrative IPs and management VLANs); block or isolate devices from untrusted network segments to prevent remote exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47368?
The severity of CVE-2026-47368 is rated as high with a score of 8.6.
How do I fix CVE-2026-47368?
To fix CVE-2026-47368, update to the latest version of Ubiquiti UniFi OS that addresses the Path Traversal vulnerability.
What type of vulnerability is CVE-2026-47368?
CVE-2026-47368 is classified as a Path Traversal vulnerability.
Who is affected by CVE-2026-47368?
Devices running certain versions of Ubiquiti UniFi OS are affected by CVE-2026-47368.
What could a malicious actor achieve by exploiting CVE-2026-47368?
A malicious actor could potentially obtain sensitive data from UniFi OS devices by exploiting CVE-2026-47368.