Ubiquiti vulnerabilities
144 CVEs and advisories name Ubiquiti as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-119251A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop…
- CVE-2026-119250A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in…
- CVE-2026-119249A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop…
- CVE-2026-116839A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found
- CVE-2026-116838A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability…
- CVE-2026-116837A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU…
- CVE-2026-116836A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS)…
- CVE-2026-110459A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain
- CVE-2026-110458A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protec
- CVE-2026-110457A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protec
- CVE-2026-110456A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in Un
- CVE-2026-110455A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in
- CVE-2026-110454A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access
- CVE-2026-95862A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to ex
- CVE-2026-95861A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to
- CVE-2026-77558A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to exe
- CVE-2026-77556A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to exe
- CVE-2026-77555A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to ex
- CVE-2026-77544A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to ex
- CVE-2026-77532A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwi
- CVE-2026-77557A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalat
- CVE-2026-77554A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to exe
- CVE-2026-77553A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access
- CVE-2026-77552A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video
- CVE-2026-77551A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in Un
- CVE-2026-77550A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devic
- CVE-2026-77549A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnera
- CVE-2026-77548A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot
- CVE-2026-77547A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
- CVE-2026-77546A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce