Vulnerabilities in Ubiquiti Inc
123 resultsCVE-2026-22558HIGHAn Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access toEPSS 0.6%CVE-2026-54408HIGHA malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to byEPSS 0.6%CVE-2026-55117HIGHA malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files EPSS 0.6%CVE-2026-77557CRITICALA malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalatEPSS 0.5%CVE-2026-54400CRITICALA malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi AccesEPSS 0.5%CVE-2026-77556HIGHA malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to exeEPSS 0.5%CVE-2026-77544HIGHA malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exEPSS 0.5%CVE-2026-77558HIGHA malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to exeEPSS 0.5%CVE-2026-54405HIGHA malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to EPSS 0.5%CVE-2024-22054HIGHA malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device maEPSS 0.5%CVE-2025-27211HIGHAn Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a malicious actor with acEPSS 0.5%CVE-2026-77549CRITICALA malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulneraEPSS 0.5%CVE-2025-23116CRITICALAn Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor witEPSS 0.5%CVE-2026-55111HIGHA malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to accesEPSS 0.5%CVE-2026-50747CRITICALA malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found EPSS 0.5%CVE-2026-56841HIGHA malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi PrEPSS 0.5%CVE-2026-54404HIGHA malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found EPSS 0.5%CVE-2026-77534CRITICALA malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain deviEPSS 0.5%CVE-2026-55115CRITICALA malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect ApplicatEPSS 0.5%CVE-2026-55114HIGHA malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi NetworEPSS 0.5%