Ubiquiti Inc vulnerabilities

CVE-2026-77542 Critical · 9.1 CWE-20 Aug 26, 2026

Improper Input Validation in Ubiquiti Inc UID Enterprise Agent

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.

CVE-2026-77541 Critical · 9.1 CWE-284 Aug 26, 2026

Improper Access Control in Ubiquiti Inc UniFi Network Application

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

CVE-2026-77540 Critical · 9.1 CWE-20 Aug 26, 2026

Improper Input Validation in Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.

CVE-2026-77539 Critical · 9.1 CWE-20 Aug 26, 2026

Improper Input Validation in Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.

CVE-2026-77538 High · 8.2 CWE-284 Aug 26, 2026

Improper Access Control in Ubiquiti Inc UniFi Connect Application

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application.

CVE-2026-77537 Critical · 10.0 CWE-20 Aug 26, 2026

Improper Input Validation in Ubiquiti Inc UniFi Protect Application

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

CVE-2026-77536 Critical · 9.9 CWE-284 Aug 26, 2026

Improper Access Control in Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

CVE-2026-77535 Critical · 9.1 CWE-20 Aug 26, 2026

Improper Input Validation in Ubiquiti Inc UniFi Network Application

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device.

CVE-2026-77534 Critical · 9.9 CWE-284 Aug 26, 2026

Improper Access Control in Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

CVE-2026-77533 Critical · 9.9 CWE-20 Aug 26, 2026

Improper Input Validation in Ubiquiti Inc UniFi Protect Application

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

CVE-2026-56842 High · 7.5 CWE-863 Jul 2, 2026

Incorrect Authorization in Ui Unifi Network Application

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

CVE-2026-56841 High · 8.8 CWE-89 Jul 2, 2026

SQL Injection in Ui Unifi Protect

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

CVE-2026-55119 High · 8.1 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Talk Application

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.

CVE-2026-55118 High · 8.3 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Network Application

A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

CVE-2026-55117 High · 8.6 CWE-22 Jul 2, 2026

Path Traversal in Ui Unifi Access

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.

CVE-2026-55116 Critical · 9.8 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Connect

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

CVE-2026-55115 Critical · 9.9 CWE-918 Jul 2, 2026

Server-Side Request Forgery (SSRF) in Ui Unifi Protect

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

CVE-2026-55114 High · 8.8 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Network Application

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

CVE-2026-55113 High · 7.5 CWE-918 Jul 2, 2026

Server-Side Request Forgery (SSRF) in Ui Unifi Talk Application

A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.

CVE-2026-55112 High · 8.8 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Dream Machine Pro Firmware

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

CVE-2026-55111 High · 7.5 CWE-22 Jul 2, 2026

Path Traversal in Ui Protect Floodlight Firmware

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.

CVE-2026-55110 Medium · 6.1 CWE-942 Jul 2, 2026

Permissive Cross-domain Policy in Ui Unifi Os Server

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.

CVE-2026-54409 High · 8.1 CWE-665 Jul 2, 2026

Improper Initialization in Ui Unifi Protect

A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras.

CVE-2026-54408 Critical · 9.8 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Protect

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.

CVE-2026-54407 High · 8.6 CWE-284 Jul 2, 2026

Improper Access Control in Ui Unifi Protect

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.