CVE-2026-47367: Ubiquiti Inc Uid Enterprise Agent

Critical severity, CVSS 9.9. EPSS: 1.4% chance of exploitation in the next 30 days.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.

Affected products

• Ubiquiti Inc Uid Enterprise Agent: before 1.61.4 (fixed in 1.61.4)

Published 2026-06-12. Last modified 2026-06-17.