Critical 9.9 CVSS Ubiquiti UniFi OS Vulnerabilities Exposed

Ubiquiti has disclosed multiple critical vulnerabilities in UniFi OS affecting several products, including UDM, UDR, UNVR, and Express network models. Tracked CVE IDs include CVE-2026-47367, CVE-2026-47369, CVE-2026-47370, CVE-2026-47368, and CVE-2026-48610, with issues ranging from command injection to path traversal and broken access control. Because attackers may achieve high-impact control such as remote exploitation, privilege escalation, or unauthorized configuration changes, administrators should update UniFi OS Server to version 5.1.15 and UID Enterprise Agent to version 1.61.4 as soon as possible.