This vulnerability (CVE-2026-95861) involves uncontrolled recursion in Ubiquiti Dream Machines, which are UniFi gateway devices. An unauthenticated attacker with network access can exploit this flaw to cause a denial of service condition by overwhelming the device through recursive function calls. The vulnerability is tracked as CWE-674 (Uncontrolled Recursion). Affected versions include those prior to 5.1.31, 4.0.21, and 5.1.26. The CVSS v3.1 base score is 7.5 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability.

Successful exploitation results in denial of service (DoS) on affected UniFi gateway devices, disrupting network availability. There is no impact on confidentiality or integrity according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor Ubiquiti's advisories for updates. Network access controls to limit exposure of affected devices may reduce risk until a fix is available.