CVE-2026-48610CWE-284

Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices…

High · published June 12, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-06-12T02:27Z
EPSS history
Timeline
  • 12 JUN 02:27Z
    Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices…
    cvelistv5