Home › UniFi OS (Dream Machines)
UniFi OS (Dream Machines): which version is safe to update to?
Firmware for UDM, UDM Pro, UDM SE and other Dream Machine consoles. Every release below is checked against official notes, NVD CVE data and public community reports.
All recent releases
5.1.33
No problems reported
5.1.31 security
No widespread problems
5.1.30
No widespread problems
5.1.27
No problems reported
5.1.26 security
No problems reported
5.1.19 security
No widespread problems
5.1.15 security
No widespread problems
5.1.12 security
No widespread problems
5.1.11
No widespread problems
Recent CVEs (last 120 days)
- CVE-2026-77550 CRITICAL 10 A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instan…
- CVE-2026-54402 CRITICAL 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.
- CVE-2026-77534 CRITICAL 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or ins…
- CVE-2026-77536 CRITICAL 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or ins…
- CVE-2026-77539 CRITICAL 9.1 A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
- CVE-2026-77540 CRITICAL 9.1 A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
- CVE-2026-55116 CRITICAL 9 A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such…
- CVE-2026-77545 CRITICAL 9 A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such Uni…
The weekly "safe to update?" email
One short email a week: what shipped, what broke, and what's safe to install. No spam.
Thanks — you're on the list.
We store only your email address and the date you signed up, to send this newsletter. We never sell or share it. Every email will have a one-click unsubscribe; you can also ask us to delete your address at any time. Privacy details.