Ui Unifi Protect vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ui Unifi Protect: 7 record(s), with affected versions and fixes.
cpe:2.3:a:ui:unifi_protect

CVE-2026-56841 High · 8.8 CWE-89 Jul 2, 2026

SQL Injection in Ui Unifi Protect

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

CVE-2026-55115 Critical · 9.9 CWE-918 Jul 2, 2026

Server-Side Request Forgery (SSRF) in Ui Unifi Protect

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

CVE-2026-54409 High · 8.1 CWE-665 Jul 2, 2026

Improper Initialization in Ui Unifi Protect

A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras.

CVE-2026-54408 Critical · 9.8 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Protect

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.

CVE-2026-54407 High · 8.6 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Protect

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.

CVE-2026-21634 Medium · 6.5 CWE-119 Jan 5, 2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Ui Unifi Protect

A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart. Affected Products: UniFi Protect Application (Version 6.1.79 and earlier). Mitigation: Update your UniFi Protect Application to Version 6.2.72 or later.

CVE-2026-21633 High · 8.8 CWE-287 Jan 5, 2026

Improper Authentication in Ui Unifi Protect

A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier). Affected Products: UniFi Protect Application (Version 6.1.79 and earlier). Mitigation: Update your UniFi Protect Application to Version 6.2.72 or later.