Ubiquiti Inc UniFi Talk Application vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ubiquiti Inc UniFi Talk Application: 4 record(s), with affected versions and fixes.

CVE-2026-77554 Critical · 10.0 CWE-20 Aug 26, 2026

Improper Input Validation in Ubiquiti Inc UniFi Talk Application

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.

CVE-2026-55119 High · 8.1 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Talk Application

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.

CVE-2026-55113 High · 7.5 CWE-918 Jul 2, 2026

Server-Side Request Forgery (SSRF) in Ui Unifi Talk Application

A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.

CVE-2026-50747 Critical · 9.9 CWE-89 Jul 2, 2026

SQL Injection in Ui Unifi Talk Application

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.