Ubiquiti vulnerabilities
144 CVEs and advisories name Ubiquiti as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-54406A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances
- CVE-2026-50748A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
- CVE-2026-54408A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to by
- CVE-2026-54409A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in Un
- CVE-2026-54403A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypas
- CVE-2026-54405A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to
- CVE-2026-54407A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to by
- CVE-2026-47370A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain de
- CVE-2026-47369A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain de
- CVE-2026-47368A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtai
- CVE-2026-47367A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterp
- CVE-2026-48610Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found
- CVE-2026-34911A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to ac
- CVE-2026-33000A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS
- CVE-2026-34910A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a
- CVE-2026-34908A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauth
- CVE-2026-34909A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the u
- CVE-2026-22563A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play net
- CVE-2026-22562A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write f
- CVE-2026-22566An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi crede
- CVE-2026-22565An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop r
- CVE-2026-22564An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthori
- CVE-2019-25652UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM
- CVE-2019-25651Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control
- CVE-2026-22559An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socia
- CVE-2026-22557A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access f
- CVE-2026-22558An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to
- CVE-2020-37052AirControl 1.4.2 - PreAuth Remote Code Execution
- CVE-2026-21639A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote
- CVE-2026-21638A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote