Ui Unifi Access vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ui Unifi Access: 4 record(s), with affected versions and fixes.
cpe:2.3:a:ui:unifi_access

CVE-2026-55117 High · 8.6 CWE-22 Jul 2, 2026

Path Traversal in Ui Unifi Access

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.

CVE-2026-54400 Critical · 9.1 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Access

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

CVE-2026-50748 Critical · 9.9 CWE-20 Jul 2, 2026

Improper Input Validation in Ui Unifi Access

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

CVE-2025-52665 Critical · 10.0 Public exploit CWE-306 Oct 30, 2025

Missing Authentication for Critical Function in Ui Unifi Access

A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later. Affected Products: UniFi Access Application (Version 3.3.22 through 3.4.31).   Mitigation: Update your UniFi Access Application to Version 4.0.21 or later.