Product by Ubiquiti Inc
Express
12 known vulnerabilities in Express (Ubiquiti Inc), 1 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability In CISA KEValso in 63 other products | 10.0 | |
| Critical | CVE-2026-77550 | Ubiquiti UniFi OS Server: CRLF Injection | 10.0 | |
| Critical | CVE-2026-47370 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77549 | Ubiquiti UniFi OS Server: CRLF Injection | 9.0 | |
| High | CVE-2026-77556 | Ubiquiti Dream Machines: Out-of-bounds Read | 7.5 | |
| High | CVE-2026-77558 | Ubiquiti Dream Machines: Out-of-bounds Read | 7.5 | |
| High | CVE-2026-77544 | Ubiquiti Dream Machines: Out-of-bounds Write | 7.5 | |
| High | CVE-2026-95861 | Ubiquiti Dream Machines: Uncontrolled Recursion | 7.5 | |
| High | CVE-2026-95862 | Ubiquiti Dream Machines: Out-of-bounds Write | 7.5 | |
| High | CVE-2026-77555 | Ubiquiti Dream Machines: Out-of-bounds Write | 7.5 | |
| Critical | CVE-2026-47369 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| High | CVE-2026-47368 | Ubiquiti UniFi OS Server: Path Traversal | 8.6 |
News
- KEV: Lantronix, Ubiquiti UniFi OS, PTC Windchill and FlexPLM, and Cisco Unified Communications Managersans-newsbites-mail,
- Patch UniFi OS for Three CVSS 10.0 Flawssans-newsbites-mail,