Loading vulnerability…
Improper Access Control in Ubiquiti UniFi OS
CVE-2026-48610 is a high-severity improper access control vulnerability in certain Ubiquiti devices running UniFi OS, including affected Cloud Gateway and Dream Machine families. Under certain network configurations, a network-adjacent attacker with no privileges can exploit the flaw to make unauthorized changes to device configuration. Publicly available information identifies the issue as an access control failure in the UniFi OS management plane, but does not disclose the precise vulnerable component, function, or request path. The vulnerability is configuration dependent, indicating that exposure varies based on how the management interface is segmented and reachable within the network.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker to modify UniFi OS device configuration without authorization. Reported consequences include unauthorized changes to security policies and network settings, such as firewall behavior, routing, VLAN configuration, and administrative settings. Because the published CVSS metrics indicate high impact to confidentiality, integrity, and availability, exploitation may also enable broader compromise of device trust and management state, potentially degrading network stability and disrupting service.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict access to the UniFi OS management interface to dedicated trusted management networks only. Remove exposure from untrusted internal segments, guest networks, shared VPN access, and any internet-reachable path. Enforce strong network segmentation around management planes and limit which hosts can initiate management connections. Because this issue may be useful in exploit chains, reduce adjacent-network exposure as much as possible until patched.
Patch, then assume compromise.
Upgrade affected UniFi OS devices to a fixed release. Available information indicates that UniFi OS 5.1.15 or later remediates this vulnerability for affected device families. Organizations should apply the vendor-provided firmware updates associated with Security Advisory Bulletin 065 across all affected UniFi OS systems, especially where management interfaces are reachable from untrusted or shared network segments.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
11 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.