--- title: "Ubiquiti UniFi OS Server vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/ubiquiti/unifi-os-server type: product description: "Ubiquiti UniFi OS Server has 20 published CVEs, 3 in CISA KEV and 3 with public exploits." updated: 2026-08-26 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Ubiquiti UniFi OS Server vulnerabilities Vendor: [Ubiquiti](https://radicalnotion.ai/vendor/ubiquiti) - **Published CVEs:** 20 - **In CISA KEV:** 3 - **With a public exploit:** 3 - **With a patch:** 20 - **Average CVSS:** 9.2 - **First CVE:** 2026-05-22 - **Latest CVE:** 2026-08-26 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 14 | | High | 6 | | Medium | 0 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 7 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 4 | | [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 3 | | [CWE-93](https://radicalnotion.ai/cwe/cwe-93) | Improper Neutralization of CRLF Sequences ('CRLF Injection') | 2 | | [CWE-942](https://radicalnotion.ai/cwe/cwe-942) | Permissive Cross-domain Security Policy with Untrusted Domains | 1 | | [CWE-489](https://radicalnotion.ai/cwe/cwe-489) | Active Debug Code | 1 | | [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 1 | | [CWE-918](https://radicalnotion.ai/cwe/cwe-918) | Server-Side Request Forgery (SSRF) | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2026 | 20 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | \< 5.1.37 | range | 7 | | \< 5.0.8 | range | 5 | | \< 5.1.19 | range | 5 | | \< 5.1.15 | range | 3 | | 5.1.37 | patched | 7 | | 5.0.8 | patched | 5 | | 5.1.19 | patched | 5 | | 5.1.15 | patched | 3 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-77550 | - | critical | 10.0 | No | No | Yes | | CVE-2026-77549 | - | critical | 9.0 | No | No | Yes | | CVE-2026-77545 | - | critical | 9.0 | No | No | Yes | | CVE-2026-77540 | - | critical | 9.1 | No | No | Yes | | CVE-2026-77539 | - | critical | 9.1 | No | No | Yes | | CVE-2026-77536 | - | critical | 9.9 | No | No | Yes | | CVE-2026-77534 | - | critical | 9.9 | No | No | Yes | | CVE-2026-54401 | - | high | 8.8 | No | No | Yes | | CVE-2026-54402 | - | critical | 9.9 | No | No | Yes | | CVE-2026-55110 | - | high | 7.5 | No | No | Yes | | CVE-2026-54404 | - | high | 8.8 | No | No | Yes | | CVE-2026-54403 | - | high | 8.6 | No | No | Yes | | CVE-2026-47370 | - | critical | 9.9 | No | No | Yes | | CVE-2026-47369 | - | critical | 9.9 | No | No | Yes | | CVE-2026-47368 | - | high | 8.6 | No | No | Yes | | CVE-2026-34911 | - | high | 7.7 | No | No | Yes | | CVE-2026-33000 | - | critical | 9.1 | No | No | Yes | | CVE-2026-34910 | - | critical | 10.0 | Yes | Yes | Yes | | CVE-2026-34908 | - | critical | 10.0 | Yes | Yes | Yes | | CVE-2026-34909 | - | critical | 10.0 | Yes | Yes | Yes | ## Frequently asked questions ### How many CVEs does Ubiquiti UniFi OS Server have? Ubiquiti UniFi OS Server has 20 published CVE records since 2026. ### How many Ubiquiti UniFi OS Server CVEs are in CISA KEV? 3 of Ubiquiti UniFi OS Server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline. ### Are there public exploits for Ubiquiti UniFi OS Server vulnerabilities? Yes — 3 of Ubiquiti UniFi OS Server's CVEs have a known public exploit. ### Which versions of Ubiquiti UniFi OS Server are affected? 8 distinct Ubiquiti UniFi OS Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Ubiquiti UniFi OS Server CVEs? Ubiquiti UniFi OS Server's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-284 (Improper Access Control), CWE-93 (Improper Neutralization of CRLF Sequences ('CRLF Injection')). ### How many critical Ubiquiti UniFi OS Server vulnerabilities are there? Ubiquiti UniFi OS Server has 14 critical and 6 high-severity CVEs. ### What is the average severity of Ubiquiti UniFi OS Server CVEs? The average CVSS base score across Ubiquiti UniFi OS Server's scored CVEs is 9.2. ## Other products from this vendor - [Express 7](https://radicalnotion.ai/vendor/ubiquiti/express-7) (25 CVEs) - [Cloud Gateways](https://radicalnotion.ai/vendor/ubiquiti/cloud-gateways) (18 CVEs) - [Dream Machines](https://radicalnotion.ai/vendor/ubiquiti/dream-machines) (18 CVEs) - [Dream Routers](https://radicalnotion.ai/vendor/ubiquiti/dream-routers) (18 CVEs) - [Dream Wall](https://radicalnotion.ai/vendor/ubiquiti/dream-wall) (18 CVEs) - [UniFi Network Application](https://radicalnotion.ai/vendor/ubiquiti/unifi-network-application) (16 CVEs) - [EdgeRouter X](https://radicalnotion.ai/vendor/ubiquiti/edgerouter-x) (14 CVEs) - [Express](https://radicalnotion.ai/vendor/ubiquiti/express) (12 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ubiquiti/unifi-os-server). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.