This vulnerability (CVE-2026-47368) involves a Path Traversal flaw (CWE-22) in UniFi OS Server by Ubiquiti Inc. An attacker with network access can exploit this issue to access data on the device that should otherwise be restricted. The CVSS 3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change with high confidentiality impact but no integrity or availability impact. No affected versions or patch information are currently specified, and no known exploits are reported in the wild.

Successful exploitation can lead to unauthorized disclosure of sensitive data from UniFi OS devices. The attacker does not need privileges or user interaction, making the vulnerability relatively easy to exploit remotely. The integrity and availability of the system are not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to UniFi OS devices to trusted users only and monitor for suspicious activity related to file access attempts. Follow Ubiquiti's official communications for updates on patches or mitigations.