Ubiquiti Inc Enterprise Fortress Gateway vulnerabilities
11 vulnerabilities
Known vulnerabilities in Ubiquiti Inc Enterprise Fortress Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-54404ubiquiti inc · cloud gateways +43 moreubiquiti inc cloud gatewaysA malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.EPSS0.49%CriticalCVE-2026-54402ubiquiti inc · cloud gateways +43 moreubiquiti inc cloud gatewaysA malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.EPSS1.76%HighCVE-2026-54401ubiquiti inc · cloud gateways +43 moreubiquiti inc cloud gatewaysA malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.EPSS0.43%HighCVE-2026-54403ubiquiti inc · cloud gateways +43 moreubiquiti inc cloud gatewaysA malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.EPSS0.77%CriticalCVE-2026-77549ubiquiti inc · cloud gateways +13 moreubiquiti inc cloud gatewaysA malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.EPSS0.51%CriticalCVE-2026-77545ubiquiti inc · cloud gateways +12 moreubiquiti inc cloud gatewaysA malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.EPSS0.39%CriticalCVE-2026-77534ubiquiti inc · cloud gateways +12 moreubiquiti inc cloud gatewaysA malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.EPSS0.47%CriticalCVE-2026-77550ubiquiti inc · cloud gateways +13 moreubiquiti inc cloud gatewaysA malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.EPSS0.80%CriticalCVE-2026-77536ubiquiti inc · cloud gateways +12 moreubiquiti inc cloud gatewaysA malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.EPSS0.42%HighCVE-2026-55110ubiquiti inc · cloud gateways +41 moreubiquiti inc cloud gatewaysA malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.EPSS0.27%CriticalCVE-2026-55116ubiquiti inc · cloud gateways +7 moreubiquiti inc cloud gatewaysA malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.EPSS0.41%