{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://database.harborguard.co/cve/CVE-2026-48610/vex.json","author":"HarborGuard Database","role":"Document Creator","timestamp":"2026-06-12T11:48:09.018Z","version":1,"tooling":"HarborGuard Database (https://database.harborguard.co)","statements":[{"vulnerability":{"name":"CVE-2026-48610","@id":"https://www.cve.org/CVERecord?id=CVE-2026-48610","description":"Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices."},"products":[{"@id":"cpe:2.3:a:ubiquiti_inc:udm:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udm:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udm-pro:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udm-pro:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udm-se:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udm-se:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udm-pro-max:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udm-pro-max:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udm-beast:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udm-beast:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:efg:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:efg:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udw:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udw:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udr:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udr:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udr7:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udr7:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:udr-5g:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:udr-5g:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:express_7:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:express_7:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:ucg-ultra:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:ucg-ultra:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:ucg-max:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:ucg-max:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:ucg-fiber:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:ucg-fiber:*:*:*:*:*:*:*:*"}},{"@id":"cpe:2.3:a:ubiquiti_inc:ucg-industrial:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:ubiquiti_inc:ucg-industrial:*:*:*:*:*:*:*:*"}}],"status":"affected","action_statement":"Update to a fixed version: 5.1.15.","timestamp":"2026-06-12T11:48:09.018Z"}]}