CVE-2026-47370Disclosure

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 5 classified signals
  • Peaked 2d ago at 2 mentions (2026-06-13); latest day: 1
  • 5 total mentions across 4 days

Deep dive

Activity timeline5 mentions / 4d
01122Mentions · 2026-06-12: 1Mentions · 2026-06-13: 2Mentions · 2026-06-15: 1Mentions · 2026-07-01: 1Patch / Workaround · 2026-06-15: 1Technical Details · 2026-06-12: 1Technical Details · 2026-06-13: 106-1206-1306-1507-01
Signal classification1 categories
Disclosure
5100.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-06-121
Disclosure1
2026-06-132
Disclosure2
2026-06-151
Disclosure1
2026-07-011
Disclosure1
Full discourse5 posts
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos Ubiquiti ❗ CVE-2026-47370 ❗ CVE-2026-47369 ❗ CVE-2026-47367 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ubiquiti-3/ https://t.co/FhwMPtR9rZ

    Post summary

    The post announces three new Ubiquiti CVEs and directs readers to a CERT page for further information, but does not provide technical details, PoC, or exploit information.

    01000257
    6.7K followersView on X
  • The Daily Tech Feed@dailytechonx
    Disclosure

    Google Chrome's V8 engine and UniFi OS have critical vulnerabilities (CVE-2026-11645, CVE-2026-47368, CVE-2026-47370) that allow remote code execution and unauthorized access. Update your systems immediately to protect against potential exploits. #Security #Chrome #UniFiOS #CVE202611645 #CVE202647368 #CVE202647370 https://thedailytechfeed.com/critical-security-flaws-in-chrome-and-unifi-os-demand-immediate-attention/

    Post summary

    Three CVEs (CVE-2026-11645, CVE-2026-47368, CVE-2026-47370) are reported to allow remote code execution and unauthorized access in Chrome's V8 engine and UniFi OS, and users are advised to update their systems ASAP.

    0000061
    388 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    There is a new vulnerability with elevated criticality in Ubiquiti UniFi OS Server and other products (CVE-2026-47370) https://vuldb.com/vuln/370526

    Post summary

    The text announces a new critical vulnerability (CVE‑2026‑47370) affecting Ubiquiti UniFi OS Server and other products, but provides no further exploitation or remediation details.

    00000103
    2.2K followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    CVE-2026-47370 (CVSS 9.9) affects certain UniFi OS devices with command injection risk. Organizations using these products should verify updates and exposure. http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/f2WF2MO27K

    Post summary

    The tweet announces a new high‑severity CVE‑2026‑47370 affecting UniFi OS devices that enables command injection but offers no exploit or patch details, simply urging users to ensure their systems are updated.

    0000043
    93 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-47370 Command Injection via Improper Input Validation in UniFi OS https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47370

    Post summary

    The entry reports a new CVE with a brief description of a command injection flaw in UniFi OS, but provides no PoC, exploit code, or evidence of active exploitation.

    0000064
    4.0K followersView on X

Explore more