Ui vulnerabilities

Products

• Unifi Dream Machine Pro Firmware 11
• Unifi Protect 11
• Enterprise Network Video Recorder Core Firmware 10
• Enterprise Network Video Recorder Firmware 10
• Unifi Cloud Gateway Fiber Firmware 10
• Unifi Cloud Gateway Industrial Firmware 10
• Unifi Cloud Gateway Max Firmware 10
• Unifi Cloudkey Firmware 10
• Unifi Dream Machine Beast Firmware 10
• Unifi Dream Machine Pro Max Firmware 10
• Unifi Dream Machine Special Edition Firmware 10
• Unifi Dream Router 7 Firmware 10
• Unifi Dream Router Firmware 10
• Unifi Dream Wall Firmware 10
• Unifi Network Video Recorder Firmware 10
• Unifi Network Video Recorder G2 Firmware 10
• Unifi Network Video Recorder G2 Pro Firmware 10
• Unifi Network Video Recorder Instant Firmware 10
• Unifi Network Video Recorder Pro Firmware 10
• Unifi Os Server 10
• Enterprise Fortress Gateway Firmware 9
• Unas 2 Firmware 9
• Unas 4 Firmware 9
• Unas Pro 4 Firmware 9
• Unas Pro 8 Firmware 9
• Unas Pro Firmware 9
• Unifi Cloud Gateway Ultra Firmware 9
• Unifi Cloudkey Enterprise Firmware 9
• Unifi Cloud Key Plus Firmware 9
• Unifi Dream Router 5g Max Firmware 9
• Unifi Express 7 Firmware 9
• Unifi Network Application 9
• Er-x Firmware 8
• Er-x-sfp Firmware 8
• Unifi Dream Machine Firmware 8
• Unifi Video 7
• Airos 5
• Edgeswitch Firmware 5
• Enterprise Firewall Core Firmware 5
• Unifi Controller 5

Show 17 moreShow less

• Desktop 4
• Edgemax Edgerouter Firmware 4
• Unifi Access 4
• Airmax Ac Firmware 3
• Edgerouter X Firmware 3
• Edgeswitch X 3
• Unifi Switch Firmware 3
• Unifi Talk Application 3
• Camera G3 Flex Firmware 2
• Edgemax Firmware 2
• Edgeos 2
• Er-12 Firmware 2
• Er-4 Firmware 2
• Er-6p Firmware 2
• Er-8-xg Firmware 2
• Unifi Protect Firmware 2
• Unifi Uap Firmware 2

Newest

• ubiquiti inc unifi network application A malicious actor with access to the network and under certain conditions could exploit an... CVE-2026-56842 7.5 HighJuly 2, 2026
• ubiquiti inc unifi talk application A malicious actor with access to the network and low privileges could exploit an Improper Access... CVE-2026-55119 8.1 HighJuly 2, 2026
• ubiquiti inc unifi network application A malicious actor with access to the network and low privileges could exploit an Improper Access... CVE-2026-55114 8.8 HighJuly 2, 2026
• ubiquiti inc unifi protect application, ui unifi protect +1 more A malicious actor with access to the network and low privileges could exploit an authenticated... CVE-2026-56841 8.8 HighJuly 2, 2026
• ubiquiti inc unifi network application A malicious actor with access to the network,low privileges and under certain conditions could... CVE-2026-55118 8.3 HighJuly 2, 2026
• ubiquiti inc unifi access application, ui unifi access +1 more A malicious actor with access to the network could exploit a Path Traversal vulnerability found... CVE-2026-55117 8.6 HighJuly 2, 2026
• ubiquiti inc cloud gateways, dream machines, dream routers +5 more +7 more A malicious actor with access to the network and under certain network configurations could... CVE-2026-55116 9.0 CriticalJuly 2, 2026
• ubiquiti inc unifi protect application, ui unifi protect +1 more A malicious actor with access to the network and low privileges could exploit a Server-Side... CVE-2026-55115 9.9 CriticalJuly 2, 2026
• ubiquiti inc unifi talk application A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF)... CVE-2026-55113 7.5 HighJuly 2, 2026
• ubiquiti inc cloud gateways, cloud keys, dream machines +23 more +25 more A malicious actor with access to the network and low privileges and under certain conditions... CVE-2026-55112 7.5 HighJuly 2, 2026
• ubiquiti inc unifi protect floodlight, ui protect floodlight firmware +1 more A malicious actor with access to the network could exploit a Path Traversal vulnerability found... CVE-2026-55111 7.5 HighJuly 2, 2026
• ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 more A malicious actor with access to the network and low privileges could exploit an Improper Input... CVE-2026-54402 9.9 CriticalJuly 2, 2026
• ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 more A malicious actor with access to the network and low privileges could exploit a Server-Side... CVE-2026-54401 7.7 HighJuly 2, 2026
• ubiquiti inc unifi talk application A malicious actor with access to the network and low privileges could exploit a series of... CVE-2026-50747 9.9 CriticalJuly 2, 2026
• ubiquiti inc cloud gateways, cloud keys, dream machines +38 more +40 more A malicious actor who lures an authenticated user to a malicious page could exploit a Cross... CVE-2026-55110 7.5 HighJuly 2, 2026
• ubiquiti inc unifi protect application, ui unifi protect +1 more A malicious actor with access to the network and under certain conditions could exploit an... CVE-2026-54409 7.5 HighJuly 2, 2026
• ubiquiti inc unifi protect application, ui unifi protect +1 more A malicious actor with access to the network could exploit an Improper Access Control... CVE-2026-54408 8.6 HighJuly 2, 2026
• ubiquiti inc unifi protect application, ui unifi protect +1 more A malicious actor with access to the network could exploit an Improper Access Control... CVE-2026-54407 8.6 HighJuly 2, 2026
• ubiquiti inc unifi network application A malicious actor with access to the network and high privileges could exploit a Path Traversal... CVE-2026-54406 8.7 HighJuly 2, 2026
• ubiquiti inc unifi network application A malicious actor with access to the network could exploit an Improper Input Validation... CVE-2026-54405 7.5 HighJuly 2, 2026
• ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 more A malicious actor with access to the network and low privileges could exploit a series of... CVE-2026-54404 8.8 HighJuly 2, 2026
• ubiquiti inc cloud gateways, cloud keys, dream machines +40 more +42 more A malicious actor with access to the network could exploit a Path Traversal vulnerability found... CVE-2026-54403 8.6 HighJuly 2, 2026
• ubiquiti inc unifi access application, ui unifi access +1 more A malicious actor with access to the network and high privileges could exploit an Improper Access... CVE-2026-54400 9.1 CriticalJuly 2, 2026
• ubiquiti inc unifi access application, ui unifi access +1 more A malicious actor with access to the network and low privileges could exploit an Improper Input... CVE-2026-50748 9.9 CriticalJuly 2, 2026
• ubiquiti inc unifi connect application A malicious actor with access to the network could exploit an Improper Access Control... CVE-2026-50746 Public exploit 10.0 CriticalJuly 2, 2026
• free5gc udm, udr, ubiquiti inc efg +58 more +60 more A malicious actor with access to the network and low privileges could exploit a Path Traversal... CVE-2026-34911 7.7 HighMay 22, 2026
• ubiquiti unifi os, free5gc udm, udr +59 more +61 more A malicious actor with access to the network could exploit an Improper Input Validation... CVE-2026-34910 In KEVPublic exploit EPSS 90.0% 10.0 CriticalMay 22, 2026
• ubiquiti unifi os, @clerk express, free5gc udm +61 more +63 more A malicious actor with access to the network could exploit a Path Traversal vulnerability found... CVE-2026-34909 In KEV EPSS 68.0% 10.0 CriticalMay 22, 2026
• ubiquiti unifi os, free5gc udm, udr +59 more +61 more A malicious actor with access to the network could exploit an Improper Access Control... CVE-2026-34908 In KEVPublic exploit EPSS 88.3% 10.0 CriticalMay 22, 2026
• ubiquiti inc unifi os server A malicious actor with access to the network and high privileges could exploit an Improper Input... CVE-2026-33000 9.1 CriticalMay 22, 2026
• ubiquiti inc airfiber af60, airfiber af60-xg, airmax ac +5 more +7 more A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the... CVE-2026-21639 8.8 HighJanuary 8, 2026
• ubiquiti inc ubb, ubb-xg, udb-pro/udb-pro-sector +4 more +6 more A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the... CVE-2026-21638 8.8 HighJanuary 8, 2026
• ubiquiti inc unifi connect ev station lite, ui unifi connect ev station lite firmware +1 more An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite ... CVE-2026-21635 5.3 MediumJanuary 5, 2026
• ubiquiti inc unifi protect application, ui unifi protect +1 more A malicious actor with access to the adjacent network could overflow the UniFi Protect... CVE-2026-21634 6.5 MediumJanuary 5, 2026
• ubiquiti inc unifi protect application, ui unifi protect +1 more A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi... CVE-2026-21633 8.8 HighJanuary 5, 2026
• ubiquiti inc ucrm argentina afip invoices plugin, ui argentina afip invoices +1 more A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and... CVE-2025-59467 7.5 HighJanuary 5, 2026
• ubiquiti inc unifi access application, ui unifi access +1 more A malicious actor with access to the management network could exploit a misconfiguration in UniFi... CVE-2025-52665 EPSS 41.1% 10.0 CriticalOctober 30, 2025
• ui u6-lr firmware Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow... CVE-2024-54750 Disputed 9.8 CriticalDecember 6, 2024
• ubiquiti unifi ios app, ui unifi +1 more An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point ... CVE-2024-45205 7.1 HighDecember 4, 2024
• ubiquiti unifi network application A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi... CVE-2024-42025 7.8 HighSeptember 13, 2024
• ubiquiti unifi network application Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are... CVE-2023-41721 10.0 CriticalOctober 25, 2023
• ubiquiti inc unifi access points, unifi switches, ui unifi switch firmware +1 more +3 more An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch... CVE-2023-35085 Public exploit 9.0 CriticalAugust 10, 2023
• ubiquiti inc unifi access points, unifi switches, ui unifi switch firmware +1 more +3 more A command injection vulnerability in the DHCP Client function of all UniFi Access Points and... CVE-2023-38034 8.3 HighAugust 10, 2023
• ubiquiti aircube, edgerouter, ui aircube firmware +1 more +3 more A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to... CVE-2023-31998 5.9 MediumJuly 18, 2023
• ubiquiti unifi network application A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier)... CVE-2023-32000 4.8 MediumJuly 7, 2023
• ubiquiti unifi network application A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on... CVE-2023-28365 9.1 CriticalJune 30, 2023
• ubiquiti unifi os UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on... CVE-2023-31997 9.0 CriticalJune 30, 2023
• ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Service denial of service CVE-2023-2379 7.5 HighApril 28, 2023
• ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2378 Disputed 8.6 HighApril 28, 2023
• ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 more Ubiquiti EdgeRouter X Web Management command injection CVE-2023-2377 Disputed 8.6 HighApril 28, 2023
• Show olderLoading…