CVE Intelligence

Ubiquiti Inc AirControl vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ubiquiti Inc AirControl: 1 record(s), with affected versions and fixes.

CVE-2020-37052 Critical · 9.8 CWE-94 Jan 30, 2026
Ubiquiti AirControl pre-authentication Java expression injection RCE
AirControl 1.4.2 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through malicious Java expression injection. Attackers can exploit the /.seam endpoint by crafting a specially constructed URL with embedded Java expressions to run commands with the application's system privileges.