This vulnerability (CVE-2026-47369) involves improper input validation (CWE-20) in Ubiquiti Inc's UniFi OS Server. It allows a malicious actor with network access and low privileges to escalate their privileges on the device or instance. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete impact on confidentiality, integrity, and availability. No remediation level or patch information is currently available, and no affected versions have been explicitly identified.

Successful exploitation could lead to full compromise of affected UniFi OS devices by allowing privilege escalation from low-privileged network access. This impacts confidentiality, integrity, and availability of the system. No known exploits are reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to UniFi OS devices to trusted users only and monitor for suspicious activity related to privilege escalation attempts.