CVE-2026-47369: Input Validation
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or restrict remote/management access for low-privilege accounts and unnecessary network-facing services; enforce least-privilege for local accounts and limit which IP ranges can reach UniFi OS management interfaces.
UniFi OS management/remote access = restricted to trusted IPs or disabled for unneeded accounts - Compensating control
Restrict network access to UniFi OS devices and instances: place devices on a management VLAN, apply firewall/ACL rules to allow management only from trusted IPs/networks, and block or limit access from untrusted networks (including the Internet).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47369?
The severity of CVE-2026-47369 is critical with a score of 9.9.
How do I fix CVE-2026-47369?
To fix CVE-2026-47369, ensure that you apply the latest security updates provided by Ubiquiti for UniFi OS.
What types of privileges can be escalated due to CVE-2026-47369?
CVE-2026-47369 allows a malicious actor to escalate privileges from low to higher levels within UniFi OS devices.
What impact does CVE-2026-47369 have on data security?
CVE-2026-47369 can lead to unauthorized access to sensitive data due to improper input validation.
Who is affected by CVE-2026-47369?
CVE-2026-47369 affects devices running UniFi OS that are accessible over networks where an attacker has low privileges.