Ubiquiti Inc vulnerabilities
Published CVEs affecting Ubiquiti Inc products: 89 record(s), with severity, exploitation and fixes.
Express 7 25UniFi OS Server 20Dream Machines 18Dream Wall 18Dream Routers 18Cloud Gateways 18Express 12Enterprise Fortress Gateway 11Cloud Keys 11Network Video Recorders 11Enterprise Firewall Core 11UniFi Protect Application 10Network Attached Storage 10UniFi Network Application 9UCG-Max 8UCG-Ultra 8UDM 8UCG-Fiber 8UCG-Industrial 8UniFi Access Application 8UDM-Pro 8UDM-SE 8UDM-Pro-Max 8UDM-Beast 8EFG 8UDW 8UDR 8UDR7 8UDR-5G 8UNAS-Pro 7UniFi Protect AI Key 7UNVR 7UNVR-Pro 7UNVR-Instant 7UNVR-G2 7UNVR-G2-Pro 7ENVR 7ENVR-Core 7UNAS-2 7UCK-Enterprise 7
CVE-2026-110459
High · 8.6
CWE-284 Oct 14, 2026
A malicious actor with access to the network could exploit an Improper Access Control...
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
CVE-2026-110458
Low · 3.7
CWE-22 Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit a Path...
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device.
CVE-2026-110457
Low · 3.7
CWE-22 Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit a Path...
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.
CVE-2026-110456
Medium · 5.3
CWE-284 Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit an...
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
CVE-2026-110455
High · 8.1
CWE-20 Oct 14, 2026
A malicious actor with access to the network and under certain conditions could exploit an...
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
CVE-2026-110454
Medium · 5.3
CWE-284 Oct 14, 2026
A malicious actor with access to the network could exploit an Improper Access Control...
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
CVE-2026-95862
High · 7.5
CWE-787 Sep 22, 2026
Out-of-bounds Write in Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-95861
High · 7.5
CWE-674 Sep 22, 2026
Uncontrolled Recursion in Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77558
High · 7.5
CWE-125 Sep 22, 2026
Out-of-bounds Read in Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77556
High · 7.5
CWE-125 Sep 22, 2026
Out-of-bounds Read in Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77555
High · 7.5
CWE-787 Sep 22, 2026
Out-of-bounds Write in Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77544
High · 7.5
CWE-787 Sep 22, 2026
Out-of-bounds Write in Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77557
Critical · 9.8
CWE-284 Aug 26, 2026
Improper Access Control in Ubiquiti Inc UniFi Protect AI Key
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.
CVE-2026-77554
Critical · 10.0
CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Talk Application
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.
CVE-2026-77553
Critical · 9.9
CWE-284 Aug 26, 2026
Improper Access Control in Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
CVE-2026-77552
Critical · 9.8
CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Enterprise Audio/Video Bridge
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.
CVE-2026-77551
Critical · 9.0
CWE-284 Aug 26, 2026
Improper Access Control in Ubiquiti Inc UniFi Connect Display Cast Pro
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device.
CVE-2026-77550
Critical · 10.0
CWE-93 Aug 26, 2026
A malicious actor with access to the network could exploit an Improper Neutralization of…
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVE-2026-77549
Critical · 9.0
CWE-93 Aug 26, 2026
A malicious actor with access to the network and under certain conditions could exploit…
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVE-2026-77548
Critical · 9.9
CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-77547
Critical · 9.9
CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77546
Critical · 9.9
CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77532
High · 8.8
CWE-122 Aug 26, 2026
A malicious actor with access to an adjacent network could exploit a Buffer Overflow...
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.
CVE-2026-77545
Critical · 9.0
CWE-489 Aug 26, 2026
A malicious actor with access to the network, low privileges and under certain…
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
CVE-2026-77543
Critical · 9.9
CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.