Loading vulnerability…
Path Traversal in Ubiquiti UniFi OS
CVE-2026-47368 is a path traversal vulnerability in certain devices running Ubiquiti UniFi OS. The flaw is caused by insufficient validation of file path input in the UniFi OS application layer, allowing an attacker to supply directory traversal sequences and access files outside the intended directory scope. Successful exploitation allows a network-accessible attacker to read data from affected UniFi OS devices or instances. Public reporting indicates the issue affects a broad set of UniFi OS product families and that it was addressed in Ubiquiti Security Advisory Bulletin 065. The vulnerability is primarily an arbitrary file-read issue with direct confidentiality impact, but it is also notable because it can be chained with other UniFi OS vulnerabilities disclosed in the same bulletin to remove authentication or privilege prerequisites and contribute to broader compromise.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows unauthorized access to sensitive data stored on the affected UniFi OS device or instance through arbitrary file read. The published CVSS vector indicates high confidentiality impact with no direct integrity or availability impact from this flaw alone. However, the vulnerability materially increases overall risk because disclosed guidance states it can be chained with other Bulletin 065 vulnerabilities, potentially enabling bypass of low-privilege or authentication requirements and contributing to full device compromise in multi-step attacks.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict access to UniFi OS management interfaces to trusted administrative networks only, isolate management on dedicated VLANs or management segments, and ensure management services are not exposed to the internet or other untrusted network segments. Reduce lateral reachability from guest, shared, or less-trusted networks to affected devices. Given the possibility of exploit chaining, prioritize containment of network access paths to the management interface until patched.
Patch, then assume compromise.
Apply the vendor fixes from Ubiquiti Security Advisory Bulletin 065. Reported fixed versions are UniFi OS 5.1.15 or later for most affected UniFi OS device families, UniFi OS 5.1.16 or later for UNAS devices, and UniFi OS 4.0.15 or later for Express devices. UniFi OS Server should be updated to 5.1.15 or later. Because the bulletin notes exploit-chaining risk across multiple vulnerabilities, all Bulletin 065 fixes should be applied together rather than remediating this CVE in isolation.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.