Skip to contentUbiquiti Inc vulnerabilities
Products
Show 13 moreShow less
Newest
- ubiquiti inc unifi connect ev station liteMultiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a...CVE-2025-242859.8 Critical
- ubiquiti inc unifi access g2 reader pro, unifi access g3 intercom, unifi access g3 reader pro +3 more +5 moreAn Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a...CVE-2025-272129.8 Critical
- ubiquiti inc edgemax edgeswitchAn Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a...CVE-2025-272117.5 High
- ubiquiti inc unifi network applicationA misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate...CVE-2025-242926.8 Medium
- ubiquiti inc uisp applicationMultiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206...CVE-2025-242909.9 Critical
- ubiquiti inc ucrm client signup pluginA Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the...CVE-2025-242897.5 High
- ubiquiti inc unifi protect applicationA misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and...CVE-2025-231644.4 Medium
- ubiquiti inc unifi protect camerasA malicious actor with access to the management network could execute a remote code execution ...CVE-2025-2312310.0 Critical
- ubiquiti inc unifi protect camerasAn Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass...CVE-2025-231197.5 High
- ubiquiti inc unifi protect camerasAn Improper Certificate Validation vulnerability could allow an authenticated malicious actor...CVE-2025-231186.4 Medium
- ubiquiti inc unifi protect camerasAn Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious...CVE-2025-231176.8 Medium
- ubiquiti inc unifi protect applicationAn Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge...CVE-2025-231169.6 Critical
- ubiquiti inc unifi protect camerasA Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE)...CVE-2025-231159.0 Critical
- free5gc udm, ubiquiti inc efg, ucg-max +9 more +11 moreAn Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured,...CVE-2025-230915.9 Medium
- ubiquiti unifi network applicationA Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi...CVE-2024-420288.8 High
- ubiquiti unifi network applicationA Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi...CVE-2024-420257.8 High
- ubiquiti unifi connect display, unifi connect display cast, unifi connect ev station +5 more +7 moreAn Unverified Password Change could allow a malicious actor with API access to the device to...CVE-2024-292082.2 Low
- ubiquiti unifi connect application, unifi connect display, unifi connect display cast +2 more +4 moreAn Improper Certificate Validation could allow a malicious actor with access to an adjacent...CVE-2024-292077.5 High
- ubiquiti unifi access g2 reader pro, unifi access intercom, unifi access intercom viewer +5 more +7 moreAn Improper Access Control could allow a malicious actor authenticated in the API to enable...CVE-2024-292062.2 Low
- ubiquiti unifi network applicationA Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi...CVE-2024-279819.8 Critical
- ubiquiti inc unifi access points, unifi express, unifi lte backup +2 more +4 moreA malformed discovery packet sent by a malicious actor with preexisting access to the network...CVE-2024-220547.5 High
- ubiquiti unifi network applicationInstances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are...CVE-2023-4172110.0 Critical
- ubiquiti inc unifi access points, unifi switches, ui unifi switch firmware +1 more +3 moreAn integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch...CVE-2023-35085Public exploit9.0 Critical
- ubiquiti inc unifi access points, unifi switches, ui unifi switch firmware +1 more +3 moreA command injection vulnerability in the DHCP Client function of all UniFi Access Points and...CVE-2023-380348.3 High
- ubiquiti unifi network applicationA Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier)...CVE-2023-320004.8 Medium
- ubiquiti unifi network applicationA backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on...CVE-2023-283659.1 Critical
- ubiquiti inc unifi network application, ui unifi network controller +1 moreAn injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53...CVE-2021-445309.8 Critical
- ui unifi switch firmware, ubiquiti inc unifi switches +1 moreA vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious...CVE-2021-445276.5 Medium
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1...CVE-2021-229578.8 High
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor...CVE-2021-229439.6 Critical
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor...CVE-2021-229448.0 High