CVE-2017-0933: Ubnt Edgeos

High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operator (read-only) account could lure an admin (root) user to access the attacker-controlled page, allowing the attacker to gain admin privileges in the system.

Affected products

• Ubnt Edgeos: up to and including 1.9.1

Published 2018-03-22. Last modified 2026-06-17.