CVE-2026-47369CWE-20

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi…

Critical · published June 12, 2026

CVSS v3.1
9.9
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00479 · 40.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-06-12T02:27Z
EPSS history
Timeline
  • 12 JUN 02:27Z
    A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi…
    cvelistv5