Vulnerabilidades do Ui Unifi Access
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ui Unifi Access: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:ui:unifi_access
CVE-2026-55117
Alta · 8.6
CWE-22 02/07/2026
Path Traversal em Ui Unifi Access
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.
CVE-2026-54400
Crítica · 9.1
CWE-284 02/07/2026
Improper Access Control em Ui Unifi Access
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
CVE-2026-50748
Crítica · 9.9
CWE-20 02/07/2026
Improper Input Validation em Ui Unifi Access
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2025-52665
Crítica · 10.0
Exploit público CWE-306 30/10/2025
Missing Authentication for Critical Function em Ui Unifi Access
A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later.
Affected Products:
UniFi Access Application (Version 3.3.22 through 3.4.31).
Mitigation:
Update your UniFi Access Application to Version 4.0.21 or later.