Skip to contentUbiquiti Inc vulnerabilities
Products
Show 13 moreShow less
Newest
- ubiquiti inc unifi talk applicationA malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF)...CVE-2026-551137.5 High
- ubiquiti inc cloud gateways, cloud keys, dream machines +23 more +25 moreA malicious actor with access to the network and low privileges and under certain conditions...CVE-2026-551127.5 High
- ubiquiti inc unifi protect floodlight, ui protect floodlight firmware +1 moreA malicious actor with access to the network could exploit a Path Traversal vulnerability found...CVE-2026-551117.5 High
- ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 moreA malicious actor with access to the network and low privileges could exploit an Improper Input...CVE-2026-544029.9 Critical
- ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 moreA malicious actor with access to the network and low privileges could exploit a Server-Side...CVE-2026-544017.7 High
- ubiquiti inc unifi talk applicationA malicious actor with access to the network and low privileges could exploit a series of...CVE-2026-507479.9 Critical
- ubiquiti inc cloud gateways, cloud keys, dream machines +38 more +40 moreA malicious actor who lures an authenticated user to a malicious page could exploit a Cross...CVE-2026-551107.5 High
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA malicious actor with access to the network and under certain conditions could exploit an...CVE-2026-544097.5 High
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA malicious actor with access to the network could exploit an Improper Access Control...CVE-2026-544088.6 High
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA malicious actor with access to the network could exploit an Improper Access Control...CVE-2026-544078.6 High
- ubiquiti inc unifi network applicationA malicious actor with access to the network and high privileges could exploit a Path Traversal...CVE-2026-544068.7 High
- ubiquiti inc unifi network applicationA malicious actor with access to the network could exploit an Improper Input Validation...CVE-2026-544057.5 High
- ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 moreA malicious actor with access to the network and low privileges could exploit a series of...CVE-2026-544048.8 High
- ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 moreA malicious actor with access to the network could exploit a Path Traversal vulnerability found...CVE-2026-544038.6 High
- ubiquiti inc unifi access application, ui unifi access +1 moreA malicious actor with access to the network and high privileges could exploit an Improper Access...CVE-2026-544009.1 Critical
- ubiquiti inc unifi access application, ui unifi access +1 moreA malicious actor with access to the network and low privileges could exploit an Improper Input...CVE-2026-507489.9 Critical
- ubiquiti inc unifi connect applicationA malicious actor with access to the network could exploit an Improper Access Control...CVE-2026-50746Public exploit10.0 Critical
- free5gc udm, udr, ubiquiti inc efg +12 more +14 moreUnder certain network configurations, a malicious actor with access to network could exploit an...CVE-2026-486108.1 High
- @clerk express, free5gc udm, udr +29 more +31 moreA malicious actor with access to the network and low privileges could exploit an Improper Input...CVE-2026-473709.9 Critical
- @clerk express, free5gc udm, udr +29 more +31 moreA malicious actor with access to the network and low privileges could exploit an Improper Input...CVE-2026-473699.9 Critical
- @clerk express, free5gc udm, udr +29 more +31 moreA malicious actor with access to the network could exploit a Path Traversal vulnerability found...CVE-2026-473688.6 High
- ubiquiti inc uid enterprise agentA malicious actor with access to the network and low privileges could exploit an Improper Input...CVE-2026-473679.9 Critical
- free5gc udm, udr, ubiquiti inc efg +58 more +60 moreA malicious actor with access to the network and low privileges could exploit a Path Traversal...CVE-2026-349117.7 High
- ubiquiti unifi os, free5gc udm, udr +59 more +61 moreA malicious actor with access to the network could exploit an Improper Input Validation...CVE-2026-34910In KEVPublic exploitEPSS 90.0%10.0 Critical
- ubiquiti unifi os, @clerk express, free5gc udm +61 more +63 moreA malicious actor with access to the network could exploit a Path Traversal vulnerability found...CVE-2026-34909In KEVEPSS 69.2%10.0 Critical
- ubiquiti unifi os, free5gc udm, udr +59 more +61 moreA malicious actor with access to the network could exploit an Improper Access Control...CVE-2026-34908In KEVPublic exploitEPSS 88.9%10.0 Critical
- ubiquiti inc unifi os serverA malicious actor with access to the network and high privileges could exploit an Improper Input...CVE-2026-330009.1 Critical
- ubiquiti inc unifi play audio port, unifi play poweramp +1 moreA series of Improper Input Validation vulnerabilities could allow a Command Injection by a...CVE-2026-225639.8 Critical
- ubiquiti inc unifi play audio port, unifi play poweramp +1 moreA malicious actor with access to the UniFi Play network could exploit a Path Traversal...CVE-2026-225629.8 Critical
- ubiquiti inc unifi play audio port, unifi play poweramp +1 moreAn Improper Access Control vulnerability could allow a malicious actor with access to the UniFi...CVE-2026-225667.5 High
- ubiquiti inc unifi play audio port, unifi play poweramp +1 moreAn Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi...CVE-2026-225657.5 High
- ubiquiti inc unifi play audio port, unifi play poweramp +1 moreAn Improper Access Control vulnerability could allow a malicious actor with access to the UniFi...CVE-2026-225649.8 Critical
- ubiquiti inc unifi network serverAn Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access...CVE-2026-225598.8 High
- ubiquiti inc unifi network applicationAn Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a...CVE-2026-225587.7 High
- ubiquiti inc unifi network applicationA malicious actor with access to the network could exploit a Path Traversal vulnerability found...CVE-2026-22557Public exploitEPSS 29.0%10.0 Critical
- ubiquiti inc airfiber af60, airfiber af60-xg, airmax ac +5 more +7 moreA malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the...CVE-2026-216398.8 High
- ubiquiti inc ubb, ubb-xg, udb-pro/udb-pro-sector +4 more +6 moreA malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the...CVE-2026-216388.8 High
- ubiquiti inc unifi connect ev station lite, ui unifi connect ev station lite firmware +1 moreAn Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite ...CVE-2026-216355.3 Medium
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA malicious actor with access to the adjacent network could overflow the UniFi Protect...CVE-2026-216346.5 Medium
- ubiquiti inc unifi protect application, ui unifi protect +1 moreA malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi...CVE-2026-216338.8 High
- ubiquiti inc ucrm argentina afip invoices plugin, ui argentina afip invoices +1 moreA Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and...CVE-2025-594677.5 High
- ubiquiti inc unifi access application, ui unifi access +1 moreA malicious actor with access to the management network could exploit a misconfiguration in UniFi...CVE-2025-52665EPSS 41.1%10.0 Critical
- ubiquiti inc unifi talk g3 phones, unifi talk touch, unifi talk touch max +2 moreA vulnerability was identified in certain UniFi Talk devices where internal debugging...CVE-2025-526637.3 High
- ubiquiti inc uisp applicationAn Improper Input Validation in UISP Application could allow a Command Injection by a malicious...CVE-2025-489793.4 Low
- ubiquiti inc edgemax edgeswitchAn Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.11.0 and earlier) could allow a...CVE-2025-489787.5 High
- ubiquiti inc uisp applicationA Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with...CVE-2025-272179.1 Critical
- ubiquiti inc uisp applicationMultiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a...CVE-2025-272168.8 High
- ubiquiti inc unifi connect display cast, unifi connect display cast lite, unifi connect display cast pro +2 moreAn Improper Access Control could allow a malicious actor authenticated in the API of certain...CVE-2025-272158.1 High
- ubiquiti inc unifi connect ev station proA Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro...CVE-2025-272149.8 Critical
- ubiquiti inc unifi connect display, unifi connect display cast, unifi connect display cast lite +2 more +4 moreAn Improper Access Control could allow a malicious actor authenticated in the API of certain...CVE-2025-272134.9 Medium
- Show moreLoading…