CVE-2026-54404 | Ubiquiti UniFi OS Server prior 5.1.19 sql injection

A vulnerability was found in Ubiquiti UniFi OS Server, Dream Machines, Enterprise Fortress Gateway, Dream Wall, Dream Routers, Express 7, Cloud Keys, Network Video Recorders, Enterprise Video Recorders, Cloud Gateways, Network Attached Storage and Enterprise Firewall Core. It has been classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-54404. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More