UniFi OS Path Traversal (CVE-2026-34909)

Georg Lauenstein@gsec

•updated May 31, 2026•1•0•6

Detects exploitation attempts of a Path Traversal vulnerability (CWE-22) in UniFi OS devices. Attackers use directory traversal sequences to access sensitive system files like /etc/passwd or shadow files to gain unauthorized account access.