unifi dream machine pro firmware vulnerabilities and fixes

Recent CVEs affecting unifi dream machine pro firmware, with upgrade or downgrade steps. 5 tracked.

Also searched as: unifidreammachineprofirmware.

unifi dream machine pro firmware has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-07-02. Highest priority: CVE-2026-54402 (score 54/100).

• CVE-2026-54401 HIGH 7.7 UPGRADE UPGRADE A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (S
• CVE-2026-54402 CRITICAL 9.9 UPGRADE UPGRADE A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul
• CVE-2026-54403 HIGH 8.6 UPGRADE UPGRADE A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain dev
• CVE-2026-55112 HIGH 7.5 UPGRADE UPGRADE A malicious actor with access to the network and low privileges and under certain conditions could exploit an
• CVE-2026-55110 HIGH 7.5 UPGRADE UPGRADE A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sh

FAQ

How do I fix unifi dream machine pro firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unifi dream machine pro firmware being exploited right now?

None of the tracked unifi dream machine pro firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which unifi dream machine pro firmware CVE should I patch first?

CVE-2026-54402 currently ranks highest (54/100): A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul.

RSS feed for unifi dream machine pro firmware · ← Back to latest CVEs