CVE-2026-95861: High severity vulnerability
Published Sep 22, 2026
·Updated
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
Event History
Sep 22, 2026
CVE Published
via MITRE·06:47 PM
Data Sourced
via MITRE·06:47 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The vector indicates network-based exploitation with no privileges required and no user interaction required.
2
What is the expected impact if exploitation succeeds?
The reported impact is denial of service on the affected device. The provided vector reports no confidentiality or integrity impact.
3
Which deployments should be considered potentially exposed?
Certain UniFi gateway devices are affected. Devices accessible to a malicious actor over the network are the relevant exposure population; the provided information does not identify specific models, versions, or default configurations.