Ubiquiti vulnerabilities
144 CVEs and advisories name Ubiquiti as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-77545A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability f
- CVE-2026-77543A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
- CVE-2026-77542A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enter
- CVE-2026-77541A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Netwo
- CVE-2026-77540A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS
- CVE-2026-77539A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS
- CVE-2026-77538A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to es
- CVE-2026-77537A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to
- CVE-2026-77536A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi
- CVE-2026-77535A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Net
- CVE-2026-77534A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi
- CVE-2026-77533A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot
- CVE-2026-55119A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk A
- CVE-2026-56842A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in Un
- CVE-2026-55114A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Networ
- CVE-2026-55116A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability
- CVE-2026-56841A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Pr
- CVE-2026-55115A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Applicat
- CVE-2026-55118A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerabil
- CVE-2026-55112A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulner
- CVE-2026-55117A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files
- CVE-2026-55113A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Applicatio
- CVE-2026-55111A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to acces
- CVE-2026-54401A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges wi
- CVE-2026-54402A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS t
- CVE-2026-50747A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found
- CVE-2026-50746A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to ex
- CVE-2026-55110A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration
- CVE-2026-54404A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found
- CVE-2026-54400A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Acces