Vulnerabilidades de Ubiquiti Inc
CVEs publicadas que afetam produtos de Ubiquiti Inc: 89 registro(s), com severidade, exploração e correções.
Express 7 25UniFi OS Server 20Dream Machines 18Dream Wall 18Dream Routers 18Cloud Gateways 18Express 12Enterprise Fortress Gateway 11Cloud Keys 11Network Video Recorders 11Enterprise Firewall Core 11UniFi Protect Application 10Network Attached Storage 10UniFi Network Application 9UCG-Max 8UCG-Ultra 8UDM 8UCG-Fiber 8UCG-Industrial 8UniFi Access Application 8UDM-Pro 8UDM-SE 8UDM-Pro-Max 8UDM-Beast 8EFG 8UDW 8UDR 8UDR7 8UDR-5G 8UNAS-Pro 7UniFi Protect AI Key 7UNVR 7UNVR-Pro 7UNVR-Instant 7UNVR-G2 7UNVR-G2-Pro 7ENVR 7ENVR-Core 7UNAS-2 7UCK-Enterprise 7
CVE-2026-110459
Alta · 8.6
CWE-284 14/10/2026
A malicious actor with access to the network could exploit an Improper Access Control...
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
CVE-2026-110458
Baixa · 3.7
CWE-22 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit a Path...
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device.
CVE-2026-110457
Baixa · 3.7
CWE-22 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit a Path...
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.
CVE-2026-110456
Média · 5.3
CWE-284 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit an...
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
CVE-2026-110455
Alta · 8.1
CWE-20 14/10/2026
A malicious actor with access to the network and under certain conditions could exploit an...
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
CVE-2026-110454
Média · 5.3
CWE-284 14/10/2026
A malicious actor with access to the network could exploit an Improper Access Control...
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
CVE-2026-95862
Alta · 7.5
CWE-787 22/09/2026
Out-of-bounds Write em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-95861
Alta · 7.5
CWE-674 22/09/2026
Uncontrolled Recursion em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77558
Alta · 7.5
CWE-125 22/09/2026
Out-of-bounds Read em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77556
Alta · 7.5
CWE-125 22/09/2026
Out-of-bounds Read em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77555
Alta · 7.5
CWE-787 22/09/2026
Out-of-bounds Write em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77544
Alta · 7.5
CWE-787 22/09/2026
Out-of-bounds Write em Ubiquiti Inc Dream Machines
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
CVE-2026-77557
Crítica · 9.8
CWE-284 26/08/2026
Improper Access Control em Ubiquiti Inc UniFi Protect AI Key
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.
CVE-2026-77554
Crítica · 10.0
CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Talk Application
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.
CVE-2026-77553
Crítica · 9.9
CWE-284 26/08/2026
Improper Access Control em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
CVE-2026-77552
Crítica · 9.8
CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Enterprise Audio/Video Bridge
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.
CVE-2026-77551
Crítica · 9.0
CWE-284 26/08/2026
Improper Access Control em Ubiquiti Inc UniFi Connect Display Cast Pro
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device.
CVE-2026-77550
Crítica · 10.0
CWE-93 26/08/2026
A malicious actor with access to the network could exploit an Improper Neutralization of…
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVE-2026-77549
Crítica · 9.0
CWE-93 26/08/2026
A malicious actor with access to the network and under certain conditions could exploit…
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVE-2026-77548
Crítica · 9.9
CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-77547
Crítica · 9.9
CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77546
Crítica · 9.9
CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77532
Alta · 8.8
CWE-122 26/08/2026
A malicious actor with access to an adjacent network could exploit a Buffer Overflow...
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.
CVE-2026-77545
Crítica · 9.0
CWE-489 26/08/2026
A malicious actor with access to the network, low privileges and under certain…
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
CVE-2026-77543
Crítica · 9.9
CWE-20 26/08/2026
Improper Input Validation em Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.