PatchTheCVEunifi os server vulnerabilities and fixes
Recent CVEs affecting unifi os server, with upgrade or downgrade steps. 4 tracked.
Also searched as: unifiosserver.
unifi os server has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-02. Highest priority: CVE-2026-54402 (score 54/100).
- CVE-2026-54401 HIGH 7.7 UPGRADE UPGRADE A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (S
- CVE-2026-54402 CRITICAL 9.9 UPGRADE UPGRADE A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul
- CVE-2026-54403 HIGH 8.6 UPGRADE UPGRADE A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain dev
- CVE-2026-55110 HIGH 7.5 UPGRADE UPGRADE A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sh
FAQ
How do I fix unifi os server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unifi os server being exploited right now?
None of the tracked unifi os server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unifi os server CVE should I patch first?
CVE-2026-54402 currently ranks highest (54/100): A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul.