VulnSocial

CVE-2026-47369Active Exploitation

MEDIUMCVSS 9.9 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-20

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-06-12); latest day: 1
  • 4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-06-12: 1Mentions · 2026-06-13: 1Mentions · 2026-07-01: 1Mentions · 2026-08-08: 1Active Exploitation · 2026-06-12: 1Patch / Workaround · 2026-06-13: 1Technical Details · 2026-06-13: 1Technical Details · 2026-08-08: 106-1206-1307-0108-08
Signal classification4 categories
Active Exploitation
125.0%
Patch
125.0%
Disclosure
125.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-121
Active Exploitation1
2026-06-131
Patch1
2026-07-011
Disclosure1
2026-08-081
General1
Full discourse4 posts
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos Ubiquiti ❗ CVE-2026-47370 ❗ CVE-2026-47369 ❗ CVE-2026-47367 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ubiquiti-3/ https://t.co/FhwMPtR9rZ

    Post summary

    The post announces three CVEs impacting Ubiquiti products and links to a CERT website for further information.

    01000257
    6.7K followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-47369: UniFi OS Privilege Escalation Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04slhnB0

    Post summary

    The snippet introduces a privilege‑escalation vulnerability in UniFi OS but provides no PoC, exploit tools, active exploitation info, or patch details.

    0000053
    32 followersView on X
  • ADK Cyber@ADKCyber
    Patch

    CVE-2026-47369 (CVSS 9.9) allows privilege escalation in certain UniFi OS devices. Organizations using these systems should verify exposure and apply available updates. http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/obLfPLZP0Z

    Post summary

    The tweet announces CVE-2026-47369, a high‑CVSS privilege escalation flaw in certain UniFi OS devices, and urges users to verify exposure and install available updates.

    0000041
    93 followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    Our CTI team identified a lot of activities targeting Ubiquiti UniFi OS Server and other products (CVE-2026-47369) https://vuldb.com/vuln/370525/cti

    Post summary

    CTI team reports significant activity against Ubiquiti UniFi OS Server (CVE‑2026‑47369), indicating potential active exploitation, though specific exploit details or defensive measures are not disclosed.

    0000081
    2.2K followersView on X

Explore more

Back to dashboard