Product by Ubiquiti Inc
Express 7
25 known vulnerabilities in Express 7 (Ubiquiti Inc), 3 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
12
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability In CISA KEValso in 62 other products | 10.0 | |
| Critical | CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability In CISA KEValso in 62 other products | 10.0 | |
| Critical | CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability In CISA KEValso in 63 other products | 10.0 | |
| Critical | CVE-2026-54402 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77550 | Ubiquiti UniFi OS Server: CRLF Injection | 10.0 | |
| Critical | CVE-2026-47370 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| High | CVE-2026-54403 | Ubiquiti UniFi OS Server: Path Traversal | 8.6 | |
| Critical | CVE-2026-77534 | Ubiquiti UniFi OS Server: Improper Access Control | 9.9 | |
| Critical | CVE-2026-77549 | Ubiquiti UniFi OS Server: CRLF Injection | 9.0 | |
| Critical | CVE-2026-77536 | Ubiquiti UniFi OS Server: Improper Access Control | 9.9 | |
| High | CVE-2026-77556 | Ubiquiti Dream Machines: Out-of-bounds Read | 7.5 | |
| High | CVE-2026-77558 | Ubiquiti Dream Machines: Out-of-bounds Read | 7.5 | |
| High | CVE-2026-77544 | Ubiquiti Dream Machines: Out-of-bounds Write | 7.5 | |
| Critical | CVE-2026-77545 | Ubiquiti UniFi OS Server: Active Debug Code | 9.0 | |
| High | CVE-2026-34911 | Ubiquiti UniFi OS Server: Path Traversal | 7.7 | |
| High | CVE-2026-54404 | Ubiquiti UniFi OS Server: SQL Injection | 8.8 | |
| High | CVE-2026-95861 | Ubiquiti Dream Machines: Uncontrolled Recursion | 7.5 | |
| High | CVE-2026-77555 | Ubiquiti Dream Machines: Out-of-bounds Write | 7.5 | |
| High | CVE-2026-95862 | Ubiquiti Dream Machines: Out-of-bounds Write | 7.5 | |
| Critical | CVE-2026-55116 | Ubiquiti Dream Machines: Improper Access Control | 9.0 | |
| Critical | CVE-2026-47369 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| High | CVE-2026-54401 | Ubiquiti UniFi OS Server: Server-Side Request Forgery (SSRF) | 7.7 | |
| High | CVE-2026-47368 | Ubiquiti UniFi OS Server: Path Traversal | 8.6 | |
| High | CVE-2026-48610 | Ubiquiti UDM: Improper Access Control | 8.1 | |
| High | CVE-2026-55110 | Ubiquiti UniFi OS Server: Permissive Cross-domain Security Policy with Untrusted Domains | 7.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- Ubiquiti Patches Critical UniFi Vulnerabilitiessans-newsbites-mail,
- KEV: Lantronix, Ubiquiti UniFi OS, PTC Windchill and FlexPLM, and Cisco Unified Communications Managersans-newsbites-mail,
- Patch UniFi OS for Three CVSS 10.0 Flawssans-newsbites-mail,