CVE-2026-55110highCWE-942

CVE-2026-55110: falha de alta gravidade em Ubiquiti Inc Cloud Gateways

Publicada em

Seguir esta CVE+ Monitorar Express+ Monitorar UniFi OS Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.3%
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Ubiquiti Inc · Cloud GatewaysUbiquiti Inc · Cloud KeysUbiquiti Inc · Dream MachinesUbiquiti Inc · Dream RoutersUbiquiti Inc · Dream WallUbiquiti Inc · Enterprise Firewall CoreUbiquiti Inc · Enterprise Fortress GatewayUbiquiti Inc · Enterprise Video RecordersUbiquiti Inc · Express 7Ubiquiti Inc · Network Attached StorageUbiquiti Inc · Network Video RecordersUbiquiti Inc · UniFi OS Server
CVEs relacionadas — Ubiquiti Inc Cloud Gateways

No mesmo produto, das mais perigosas para as menos.

CVE-2026-54402CRITICALCVE-2026-54402EPSS 1.8%CVE-2026-77550CRITICALCVE-2026-77550EPSS 0.8%CVE-2026-54403HIGHCVE-2026-54403EPSS 0.8%CVE-2026-77558HIGHCVE-2026-77558EPSS 0.5%CVE-2026-77556HIGHCVE-2026-77556EPSS 0.5%CVE-2026-77544HIGHCVE-2026-77544EPSS 0.5%