PatchSiren cyber security CVE debrief
CVE-2026-47368 Ubiquiti Inc CVE debrief
A Path Traversal vulnerability was discovered in certain devices running UniFi OS. This vulnerability, tracked as CVE-2026-47368, allows a malicious actor with access to the network to obtain data from affected UniFi OS devices or instances. The vulnerability has a CVSS score of 8.6, indicating a high severity level.
- Vendor
- Ubiquiti Inc
- Product
- UniFi OS Server
- CVSS
- HIGH 8.6
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-12
- Original CVE updated
- 2026-06-12
- Advisory published
- 2026-06-12
- Advisory updated
- 2026-06-12
Who should care
Administrators and users of UniFi OS devices should be aware of this vulnerability and take necessary actions to mitigate the risk.
Technical summary
The vulnerability is caused by a Path Traversal issue in UniFi OS. This type of vulnerability allows an attacker to access files and directories outside the intended scope, potentially leading to unauthorized data disclosure.
Defensive priority
High
Recommended defensive actions
- Apply patches or updates provided by the vendor as soon as possible.
- Restrict network access to UniFi OS devices to minimize the attack surface.
- Monitor UniFi OS devices for suspicious activity.
Evidence notes
The CVE record and NVD detail pages provide additional information about this vulnerability.
Official resources
-
CVE-2026-47368 CVE record
CVE.org
-
CVE-2026-47368 NVD detail
NVD
-
Source item URL
nvd_modified
- Source reference
CVE-2026-47368 was published on 2026-06-12T04:17:06.343Z and modified on 2026-06-12T16:10:10.070Z.