What is the CVSS score of CVE-2026-47367?

CVE-2026-47367 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of UID Enterprise Agent are affected by CVE-2026-47367?

Ubiquiti UID Enterprise Agent contains a critical vulnerability (CVE-2026-47367, CVSS 9.9) enabling remote command execution on networked devices; no patch is currently available.. A patch is available.

How to fix or mitigate CVE-2026-47367?

24 hours: Inventory all systems running Ubiquiti UID Enterprise Agent; assess network exposure and identify business-critical deployments. 7 days: Deploy firewall rules to restrict network access to the Agent and implement network segmentation to isolate affected systems. 30 days: Monitor Ubiquiti security advisories for patch availability; stage and test patch deployment plan for emergency rollout when released.

UID Enterprise Agent CVE-2026-47367

EUVD-2026-36379 CRITICAL

Improper Input Validation (CWE-20)

2026-06-12 hackerone

GHSA-4fpg-88pm-v9hh

Command Injection Uid Enterprise Agent

9.9

CVSS 3.1 · Vendor: hackerone

Severity by source

Vendor (hackerone) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

Network-reachable agent, low-complexity injection, requires a low-privileged account (PR:L), no user interaction; command execution as the agent crosses into host/management scope with full CIA impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (hackerone).

CVSS VectorVendor: hackerone

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jun 12, 2026 - 05:01 EUVD

Analysis Generated

Jun 12, 2026 - 03:46 vuln.today

DescriptionCVE.org

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.

AnalysisAI

Command injection in Ubiquiti UID Enterprise Agent allows a low-privileged attacker with network access to execute arbitrary commands on the host device by abusing improper input validation. The CVSS 9.9 score reflects a scope change with high confidentiality, integrity, and availability impact, and no public exploit identified at time of analysis. Defenders should treat this as a high-priority patch item given the low attack complexity and minimal privilege requirement.

Technical ContextAI

UID Enterprise Agent is Ubiquiti's identity/access-management endpoint agent used in enterprise deployments to bridge identity providers and network access enforcement on Ubiquiti infrastructure. The root cause class is CWE-20 (Improper Input Validation): user-supplied input is passed to a downstream command-execution context without sufficient sanitization, allowing operating-system command injection on the host running the agent. Because the agent typically runs with elevated privileges to manage host or network state, injected commands inherit that execution context, which aligns with the CVSS scope-change (S:C) designation.

RemediationAI

Patch available per vendor advisory - consult Ubiquiti Security Advisory Bulletin 065 at https://community.ui.com/releases/Security-Advisory-Bulletin-065-065/aa46a22b-fc43-4eae-9382-6fc8feda967a for the fixed UID Enterprise Agent build and upgrade all deployed agents to that version. Until patching is complete, restrict network reachability to the UID Enterprise Agent management/API interface to trusted administrative subnets via host or network ACLs, and tighten the population of accounts holding the low-privilege role required for exploitation (audit and revoke unnecessary access), accepting that ACL changes may disrupt legitimate identity-bridging traffic if the agent is broadly consumed by other UniFi components. Monitor host process trees on systems running the agent for unexpected child processes (shell, scripting interpreters) spawned by the agent service as a detection compensating control.