{"id":"CVE-2026-22559","aliases":["EUVD-2026-14988","GHSA-8m5g-mp2m-6hp8"],"status":"published","title":"An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access...","description":"An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.\r\n\r\n\r\nAffected Products:\r\nUniFi Network Server (Version 10.1.85 and earlier) \r\n\r\n\r\nMitigation:\r\nUpdate UniFi Network Server to Version 10.1.89 or later.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00381,"percentile":0.32492,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2026-03-24T19:05:40Z","modified":"2026-06-17T10:20:04Z","products":[{"vendor":"ubiquiti inc","product":"unifi network server"}],"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22559"},{"url":"https://github.com/advisories/GHSA-8m5g-mp2m-6hp8"}],"sources":{"cve":[{"id":"CVE-2026-22559","description":"An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.\r\n\r\n\r\nAffected Products:\r\nUniFi Network Server (Version 10.1.85 and earlier) \r\n\r\n\r\nMitigation:\r\nUpdate UniFi Network Server to Version 10.1.89 or later.","status":"published","published":"2026-03-24T19:05:40.745Z","modified":"2026-03-24T20:20:08.516Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T13:39:05.585774Z"}],"euvd":[{"id":"EUVD-2026-14988","description":"An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.\r\n\r\n\r\nAffected Products:\r\nUniFi Network Server (Version 10.1.85 and earlier) \r\n\r\n\r\nMitigation:\r\nUpdate UniFi Network Server to Version 10.1.89 or later.","status":"published","published":"2026-03-24T19:05:40Z","modified":"2026-03-24T20:20:08Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:29.547775Z"}],"ghsa":[{"id":"GHSA-8m5g-mp2m-6hp8","title":"An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access...","description":"An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.\n\n\nAffected Products:\nUniFi Network Server (Version 10.1.85 and earlier) \n\n\nMitigation:\nUpdate UniFi Network Server to Version 10.1.89 or later.","status":"published","published":"2026-03-24T21:31:24Z","modified":"2026-03-24T21:31:35Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:06:50.028669Z"}],"nvd":[{"id":"CVE-2026-22559","description":"An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.\r\n\r\n\r\nAffected Products:\r\nUniFi Network Server (Version 10.1.85 and earlier) \r\n\r\n\r\nMitigation:\r\nUpdate UniFi Network Server to Version 10.1.89 or later.","status":"published","published":"2026-03-24T20:16:26.253Z","modified":"2026-06-17T10:20:04.783Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:12:10.568062Z"}]}}