PatchTheCVE: unifi os serverhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-55110: A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Shhttps://patchthecve.com/cve/CVE-2026-55110.htmlhttps://patchthecve.com/cve/CVE-2026-55110.htmlThu, 09 Jul 2026 18:33:16 +0000HIGH 7.5: A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.CVE-2026-54403: A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devhttps://patchthecve.com/cve/CVE-2026-54403.htmlhttps://patchthecve.com/cve/CVE-2026-54403.htmlFri, 10 Jul 2026 02:46:57 +0000HIGH 8.6: A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.CVE-2026-54402: A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulhttps://patchthecve.com/cve/CVE-2026-54402.htmlhttps://patchthecve.com/cve/CVE-2026-54402.htmlFri, 10 Jul 2026 02:49:32 +0000CRITICAL 9.9: A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.CVE-2026-54401: A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (Shttps://patchthecve.com/cve/CVE-2026-54401.htmlhttps://patchthecve.com/cve/CVE-2026-54401.htmlFri, 10 Jul 2026 02:50:13 +0000HIGH 7.7: A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.