What’s Vulnerable › Vulnerabilities
CVE-2018-5265
- Severity: high (CVSS 7.2 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-06-07 · updated 2026-06-17
- Weakness: CWE-78
Description
Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters.
Affected products
- Ui Edgeos: 1.9.1
References
Get alerted when CVE-2018-5265 or the next vulnerability affects your stack