Loading vulnerability…
SSRF Privilege Escalation in UniFi OS
CVE-2026-54401 is a server-side request forgery vulnerability affecting UniFi OS devices, instances, and related UniFi OS Server and UDM family deployments. The flaw allows a remote attacker with network access and only low privileges to induce the vulnerable system to make unintended server-side requests, which can then be leveraged to escalate privileges within the affected UniFi OS environment. Reported affected versions include UniFi OS / Server 5.1.15 and earlier, UniFi Network Attached Storage 5.1.16 and earlier, and EF-Core 5.1.18 and earlier. The vulnerability is rated high severity with a reported CVSS score of 7.7.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows a low-privileged attacker to escalate privileges within the affected UniFi OS device or instance. This can enable unauthorized administrative actions and broader control over the target platform than originally granted to the attacker.
If you can’t patch tonight, do this now.
No interim workaround information is available. The primary mitigation is to apply the vendor-provided updates promptly. Until patching is completed, reduce exposure by limiting network access to management interfaces and restricting low-privileged account access where operationally feasible.
Patch, then assume compromise.
Upgrade affected UniFi OS platforms to a patched release. Reported vendor guidance recommends upgrading UniFi OS to version 5.1.19 or later. Affected related platforms should also be updated to the corresponding fixed vendor releases.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.