CVE Intelligence

Vulnerabilidades de Ubiquiti Inc

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Ubiquiti Inc: 89 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-110459 Alta · 8.6 CWE-284 14/10/2026
A malicious actor with access to the network could exploit an Improper Access Control...
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
CVE-2026-110458 Baixa · 3.7 CWE-22 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit a Path...
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device.
CVE-2026-110457 Baixa · 3.7 CWE-22 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit a Path...
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.
CVE-2026-110456 Média · 5.3 CWE-284 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit an...
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
CVE-2026-110455 Alta · 8.1 CWE-20 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit an...
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
CVE-2026-110454 Média · 5.3 CWE-284 14/10/2026
A malicious actor with access to the network could exploit an Improper Access Control...
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
CVE-2026-95862 Alta · 7.5 CWE-787 22/09/2026
Out-of-bounds Write em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-95861 Alta · 7.5 CWE-674 22/09/2026
Uncontrolled Recursion em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77558 Alta · 7.5 CWE-125 22/09/2026
Out-of-bounds Read em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77556 Alta · 7.5 CWE-125 22/09/2026
Out-of-bounds Read em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77555 Alta · 7.5 CWE-787 22/09/2026
Out-of-bounds Write em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77544 Alta · 7.5 CWE-787 22/09/2026
Out-of-bounds Write em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77557 Crítica · 9.8 CWE-284 26/08/2026
Improper Access Control em Ubiquiti Inc UniFi Protect AI Key
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.
CVE-2026-77554 Crítica · 10.0 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Talk Application
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.
CVE-2026-77553 Crítica · 9.9 CWE-284 26/08/2026
Improper Access Control em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
CVE-2026-77552 Crítica · 9.8 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Enterprise Audio/Video Bridge
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.
CVE-2026-77551 Crítica · 9.0 CWE-284 26/08/2026
Improper Access Control em Ubiquiti Inc UniFi Connect Display Cast Pro
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device.
CVE-2026-77550 Crítica · 10.0 CWE-93 26/08/2026
A malicious actor with access to the network could exploit an Improper Neutralization of…
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVE-2026-77549 Crítica · 9.0 CWE-93 26/08/2026
A malicious actor with access to the network and under certain conditions could exploit…
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVE-2026-77548 Crítica · 9.9 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-77547 Crítica · 9.9 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77546 Crítica · 9.9 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77532 Alta · 8.8 CWE-122 26/08/2026
A malicious actor with access to an adjacent network could exploit a Buffer Overflow...
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.
CVE-2026-77545 Crítica · 9.0 CWE-489 26/08/2026
A malicious actor with access to the network, low privileges and under certain…
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
CVE-2026-77543 Crítica · 9.9 CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.