unifi dream machine firmware vulnerabilities and fixes

Recent CVEs affecting unifi dream machine firmware, with upgrade or downgrade steps. 3 tracked.

Also searched as: unifidreammachinefirmware.

unifi dream machine firmware has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-07-02. Highest priority: CVE-2026-54402 (score 54/100).

• CVE-2026-54401 HIGH 7.7 UPGRADE UPGRADE A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (S
• CVE-2026-54402 CRITICAL 9.9 UPGRADE UPGRADE A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul
• CVE-2026-54403 HIGH 8.6 UPGRADE UPGRADE A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain dev

FAQ

How do I fix unifi dream machine firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unifi dream machine firmware being exploited right now?

None of the tracked unifi dream machine firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which unifi dream machine firmware CVE should I patch first?

CVE-2026-54402 currently ranks highest (54/100): A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul.

RSS feed for unifi dream machine firmware · ← Back to latest CVEs