Ubiquiti UniFi: Privilege Escalation

Ubiquiti UniFi: Privilege Escalation A vulnerability has been discovered in Ubiquiti UniFi, which can lead to local privilege escalation. unifi 2024-11-06 2024-11-06 941922 local 8.5.6 8.5.6

Ubiquiti UniFi is a Management Controller for Ubiquiti Networks UniFi APs.

A vulnerability has been discovered in Ubiquiti UniFi. Please review the CVE identifier referenced below for details.

The vulnerability allows a malicious actor with a local operational system user to execute high privilege actions on UniFi Network Server.

There is no known workaround at this time.

All Ubiquiti UniFi users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=net-wireless/unifi-8.5.6"

CVE-2024-42028 graaff graaff