Description
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
Published: 2026-09-22
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via out-of-bounds read
Action: Immediate Patch
AI Analysis

Impact

An out-of-bounds read flaw allows an attacker who has network access to target specific UniFi gateway devices, causing the device to crash or become unresponsive. The vulnerability is a classic CWE-125 type memory error that can be triggered by sending crafted input over the network, leading to a denial of service without compromising confidentiality or integrity.

Affected Systems

Affected products include Ubiquiti Cloud Gateways, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewalls, Express, Express 7, and UniFi Gateways. All are certain UniFi gateway devices; no specific firmware versions or models are listed.

Risk and Exploitability

The CVSS score of 7.5 indicates a high impact and moderately high exploitation difficulty. The EPSS score is not available, but the lack of listing in the KEV catalog suggests no known active exploitation. An attacker would need network connectivity to the vulnerable gateway, but no privileged access is required. The flaw can be triggered remotely from within the same LAN or over the Internet if the gateway is exposed.

Generated by OpenCVE AI on September 22, 2026 at 19:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest firmware update or patch released by Ubiquiti for the affected UniFi gateway devices.
  • Restrict network access to the gateway by enabling firewall rules or placing the gateway in a trusted VLAN, blocking or limiting management traffic from untrusted sources.
  • Implement monitoring and logging to detect abnormal traffic patterns that could indicate an attempted OOB read exploitation, and configure automated reboot or fail‑over mechanisms to mitigate DoS.

Generated by OpenCVE AI on September 22, 2026 at 19:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 29 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
First Time appeared Ubiquiti
Ubiquiti cloud Gateways
Ubiquiti dream Machines
Ubiquiti dream Routers
Ubiquiti dream Wall
Ubiquiti enterprise Firewalls
Ubiquiti express
Ubiquiti express 7
Ubiquiti unifi Gateways
Vendors & Products Ubiquiti
Ubiquiti cloud Gateways
Ubiquiti dream Machines
Ubiquiti dream Routers
Ubiquiti dream Wall
Ubiquiti enterprise Firewalls
Ubiquiti express
Ubiquiti express 7
Ubiquiti unifi Gateways

Tue, 22 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 22 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read Exploitation Causing Denial of Service on UniFi Gateways

Tue, 22 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Description A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Ubiquiti Cloud Gateways Dream Machines Dream Routers Dream Wall Enterprise Firewalls Express Express 7 Unifi Gateways
cve-icon MITRE

Status: PUBLISHED

Assigner: Ubiquiti

Published:

Updated: 2026-09-22T19:33:21.537Z

Reserved: 2026-08-20T20:32:43.655Z

Link: CVE-2026-77556

cve-icon Vulnrichment

Updated: 2026-09-22T19:33:17.773Z

cve-icon NVD

Status : Deferred

Published: 2026-09-22T19:16:51.860

Modified: 2026-09-22T20:17:08.570

Link: CVE-2026-77556

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-29T13:21:02Z

Weaknesses