Skip to content

Ubiquiti vulnerabilities

Products

Newest

ubiquiti unifi os, free5gc udm, udr +59 more +61 more A malicious actor with access to the network could exploit an Improper Input Validation... CVE-2026-34910 In KEVPublic exploit EPSS 90.0% 10.0 CriticalMay 22, 2026
ubiquiti unifi os, @clerk express, free5gc udm +61 more +63 more A malicious actor with access to the network could exploit a Path Traversal vulnerability found... CVE-2026-34909 In KEV EPSS 69.2% 10.0 CriticalMay 22, 2026
ubiquiti unifi os, free5gc udm, udr +59 more +61 more A malicious actor with access to the network could exploit an Improper Access Control... CVE-2026-34908 In KEVPublic exploit EPSS 88.9% 10.0 CriticalMay 22, 2026
ubiquiti unifi network controller UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM CVE-2019-25652 7.7 HighMarch 27, 2026
ubiquiti unifi network controller, unifi uap firmware, unifi uap-ac firmware +2 more +4 more Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control CVE-2019-25651 9.0 CriticalMarch 27, 2026
ubiquiti unifi ios app, ui unifi +1 more An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point ... CVE-2024-45205 7.1 HighDecember 4, 2024
ubiquiti unifi network application A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi... CVE-2024-42028 8.8 HighOctober 28, 2024
ubiquiti airmax firmware Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain... CVE-2024-44540 6.6 MediumSeptember 23, 2024
ubiquiti unifi network application A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi... CVE-2024-42025 7.8 HighSeptember 13, 2024
ubiquiti unifi u6+ access point A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to... CVE-2024-37380 5.3 MediumJuly 22, 2024
ubiquiti unifi ios app UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points... CVE-2024-34786 4.8 MediumJuly 9, 2024
ubiquiti unifi connect display, unifi connect display cast, unifi connect ev station +5 more +7 more An Unverified Password Change could allow a malicious actor with API access to the device to... CVE-2024-29208 2.2 LowMay 7, 2024
ubiquiti unifi connect application, unifi connect display, unifi connect display cast +2 more +4 more An Improper Certificate Validation could allow a malicious actor with access to an adjacent... CVE-2024-29207 7.5 HighMay 7, 2024
ubiquiti unifi access g2 reader pro, unifi access intercom, unifi access intercom viewer +5 more +7 more An Improper Access Control could allow a malicious actor authenticated in the API to enable... CVE-2024-29206 2.2 LowMay 7, 2024
ubiquiti unifi network application A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi... CVE-2024-27981 9.8 CriticalApril 4, 2024
ubiquiti inc unifi access points, unifi express, unifi lte backup +2 more +4 more A malformed discovery packet sent by a malicious actor with preexisting access to the network... CVE-2024-22054 7.5 HighFebruary 20, 2024
ubiquiti unifi network application Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are... CVE-2023-41721 10.0 CriticalOctober 25, 2023
ubiquiti aircube, edgerouter, ui aircube firmware +1 more +3 more A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to... CVE-2023-31998 5.9 MediumJuly 18, 2023
ubiquiti unifi network application A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier)... CVE-2023-32000 4.8 MediumJuly 7, 2023
ubiquiti unifi network application A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on... CVE-2023-28365 9.1 CriticalJune 30, 2023
ubiquiti unifi os UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on... CVE-2023-31997 9.0 CriticalJune 30, 2023
ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Service denial of service CVE-2023-2379 7.5 HighApril 28, 2023
ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2378 Disputed 8.6 HighApril 28, 2023
ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2377 Disputed 8.6 HighApril 28, 2023
ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2376 Disputed 8.6 HighApril 28, 2023
ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2375 Public exploitDisputed 8.6 HighApril 28, 2023
ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2374 Disputed 8.6 HighApril 28, 2023
ubiquiti edgerouter x, ui edgemax edgerouter firmware +1 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2373 Disputed 8.6 HighApril 28, 2023
ubiquiti edgerouter x, ui edgerouter x firmware +1 more ** DISPUTED ** A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and... CVE-2023-1458 Disputed 7.2 HighMarch 25, 2023
ubiquiti edgerouter x, ui edgerouter x firmware +1 more ** DISPUTED ** A vulnerability, which was classified as critical, was found in Ubiquiti... CVE-2023-1457 Disputed 7.2 HighMarch 25, 2023
ubiquiti edgerouter x, ui edgerouter x firmware +1 more ** DISPUTED ** A vulnerability, which was classified as critical, has been found in Ubiquiti... CVE-2023-1456 Disputed 7.2 HighMarch 25, 2023
ubiquiti airos On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show... CVE-2010-5330 In KEV EPSS 40.2% 9.8 CriticalJune 11, 2019
ui edgeos, ubiquiti edgerouter x +1 more Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management... CVE-2017-0935 8.8 HighMarch 22, 2018
ubnt edgeos, ubiquiti edgerouter x +1 more Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management... CVE-2017-0934 8.8 HighMarch 22, 2018
ubnt edgeos, ubiquiti edgerouter x +1 more Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF)... CVE-2017-0933 8.0 HighMarch 22, 2018
ubnt edgeos, ubiquiti edgerouter x +1 more Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management... CVE-2017-0932 8.8 HighMarch 22, 2018