Known vulnerabilities in Express

Vendor: Ubiquiti Networks
Software: Express
Software CPE: cpe:2.3:a:ubiquiti_networks:express:*:*:*:*:*:*:*:*
Website: https://www.ui.com/
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Express Express is affected by 1 known vulnerabilities: 1 high Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34909		 CWE-22 High
No
Exploited
 4.0.14 26.06.2026 SB2026062639