What’s Vulnerable › Vulnerabilities
CVE-2026-48610
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-12 · updated 2026-06-17
- Weakness: CWE-284
Description
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Affected products
- Ubiquiti Inc EFG: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc Express 7: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UCG-Fiber: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UCG-Industrial: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UCG-Max: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UCG-Ultra: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDM: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDM-Beast: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDM-Pro: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDM-Pro-Max: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDM-SE: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDR: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDR-5G: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDR7: before 5.1.15 — fixed in 5.1.15
- Ubiquiti Inc UDW: before 5.1.15 — fixed in 5.1.15
How to fix
Upgrade to a fixed version: Ubiquiti Inc EFG 5.1.15; Ubiquiti Inc Express 7 5.1.15; Ubiquiti Inc UCG-Fiber 5.1.15; Ubiquiti Inc UCG-Industrial 5.1.15; Ubiquiti Inc UCG-Max 5.1.15; Ubiquiti Inc UCG-Ultra 5.1.15; Ubiquiti Inc UDM 5.1.15; Ubiquiti Inc UDM-Beast 5.1.15; Ubiquiti Inc UDM-Pro 5.1.15; Ubiquiti Inc UDM-Pro-Max 5.1.15; Ubiquiti Inc UDM-SE 5.1.15; Ubiquiti Inc UDR 5.1.15. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-48610 or the next vulnerability affects your stack