CVE-2026-54401 | Ubiquiti UniFi OS Server up to 5.1.18 server-side request forgery

A vulnerability has been found in Ubiquiti UniFi OS Server, Dream Machines, Enterprise Fortress Gateway, Dream Wall, Dream Routers, Express 7, Cloud Keys, Network Video Recorders, Enterprise Video Recorders, Cloud Gateways, Network Attached Storage and Enterprise Firewall Core up to 5.1.18 and classified as critical. This impacts an unknown function. Performing a manipulation results in server-side request forgery.

This vulnerability is known as CVE-2026-54401. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More