Ubiquiti Inc Express 7

Name: Ubiquiti Inc Express 7
Brand: Ubiquiti Inc

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical4high1medium0low

updated 2026-10-26

vulnerabilities (55)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34910US	—OT critical	90.0% (100th)	KEV	5.1.12	2026-05-22	0 → 5.1.12
CVE-2026-34908US	—OT critical	88.3% (100th)	KEV	5.1.12	2026-05-22	0 → 5.1.12
CVE-2026-34909US	—OT critical	68.0% (99th)	KEV	5.1.12	2026-05-22	0 → 5.1.12
CVE-2026-50746US	—	1.69% (77th)	Exploit	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-77542US	—	1.29% (70th)	Exploit	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-54402US	high8.8	1.76% (78th)	—	5.1.19	2026-07-02	2 versions
CVE-2026-77554US	—	1.64% (76th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77552US	—	1.64% (76th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77537US	—	1.64% (76th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-50748US	—	1.63% (76th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-77548US	—	1.44% (73rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77547US	—	1.44% (73rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77546US	—	1.44% (73rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77543US	—	1.44% (73rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77533US	—	1.44% (73rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77540US	—	1.29% (70th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77539US	—	1.29% (70th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77535US	—	1.29% (70th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-47370US	—	0.83% (57th)	—	5.1.15	2026-06-12	0 → 5.1.15
CVE-2026-77550US	—	0.80% (56th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-54403US	—	0.77% (55th)	—	5.1.19	2026-07-02	2 versions
CVE-2026-34911US	—	0.68% (52nd)	—	5.1.12	2026-05-22	0 → 5.1.12
CVE-2026-54406US	—	0.59% (48th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-54408US	critical9.8	0.57% (47th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-55117US	—	0.56% (46th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-77557US	—	0.55% (46th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-54400US	—	0.52% (44th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-54405US	—	0.52% (44th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-77549US	—	0.51% (43rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-55111US	—	0.50% (43rd)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-56841US	—	0.49% (42nd)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-54404US	—	0.49% (42nd)	—	5.1.19	2026-07-02	2 versions
CVE-2026-50747US	—	0.49% (42nd)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-55115US	critical9.9	0.47% (40th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-77553US	—	0.47% (40th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77534US	—	0.47% (40th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-55114US	—	0.47% (40th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-77541US	—	0.46% (40th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-54407US	—	0.45% (39th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-54409US	high8.1	0.44% (38th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-54401US	high8.8	0.43% (37th)	—	5.1.19	2026-07-02	2 versions
CVE-2026-77536US	—	0.42% (36th)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-55116US	critical9.8	0.41% (35th)	—	5.1.19	2026-07-02	2 versions
CVE-2026-77545US	—OT elevated	0.39% (33rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-77538US	—	0.39% (33rd)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-55119US	—	0.39% (32nd)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-77551US	—	0.37% (31st)	—	no fix	2026-08-26	≤ vers:unknown/*
CVE-2026-55113US	—	0.37% (31st)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-55118US	—	0.37% (30th)	—	no fix	2026-07-02	≤ vers:unknown/*
CVE-2026-56842US	—OT elevated	0.36% (30th)	—	no fix	2026-07-02	≤ vers:unknown/*

showing 50 of 55

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation18 CVEs
CWE-284Improper Access Control18 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')2 CVEs
CWE-489Active Debug Code1 CVEs
CWE-665Improper Initialization1 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)47 CVEs
EUEU Vulnerability Database (ENISA)14 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan