CVE-2025-48978

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.11.0 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network. Affected Products: EdgeMAX EdgeSwitch Version 1.11.0 and earlier Mitigation: Update the EdgeMAX EdgeSwitch to Version 1.11...

CVE-2025-48978

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.11.0 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network. Affected Products: EdgeMAX EdgeSwitch Version 1.11.0 and earlier Mitigation: Update the EdgeMAX EdgeSwitch to Version 1.11...

PT-2025-34178 · Edgemax · Edgeswitch

Name of the Vulnerable Software and Affected Versions: EdgeMAX EdgeSwitch versions 1.11.0 and earlier Description: An improper input validation in EdgeMAX EdgeSwitch could allow a command injection by a malicious actor with access to the EdgeSwitch adjacent network. Recommendations: Update EdgeMA...

Ubiquiti EdgeMAX EdgeSwitch 安全漏洞

The Ubiquiti EdgeMAX EdgeSwitch is a PoE+ Gigabit switch from Ubiquiti USA. A security vulnerability exists in Ubiquiti EdgeMAX EdgeSwitch version 1.11.0 and earlier, which stems from improper input validation and could lead to a command injection attack...

CVE-2025-48978: Improper Neutralization of Special Elements used in a Command

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.11.0 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network. Affected Products: EdgeMAX EdgeSwitch Version 1.11.0 and earlier Mitigation: Update the EdgeMAX EdgeSwitch to Version 1.11...

CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2025-27211

The EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) is vulnerable to a Command Injection flaw due to improper input validation . A malicious actor with access to the adjacent network of the EdgeSwitch can exploit this vulnerability to execute arbitrary commands. To mitigate this risk, it is recom...

CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

PT-2025-31871 · Edgemax · Edgeswitch

Name of the Vulnerable Software and Affected Versions: EdgeMAX EdgeSwitch versions 1.10.4 and earlier Description: An improper input validation in EdgeMAX EdgeSwitch can allow a malicious actor with access to the EdgeSwitch adjacent network to execute commands through command injection...

CVE-2025-27211: Improper Input Validation

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2020-8126

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user Privilege-1 to escalate privileges and became administrator Privilege-15...

CVE-2020-8234

A vulnerability exists in The EdgeMax EdgeSwitch firmware...

CVE-2020-8233

A command injection vulnerability exists in EdgeSwitch firmware...

CVE-2020-8232

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

CVE-2019-5446

Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root...

CVE-2019-5445

DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands...

SUSE CVE-2020-8233

A command injection vulnerability exists in EdgeSwitch firmware v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges...

EdgeSwitch Command Injection Vulnerability

EdgeSwitch is a poe Gigabit switch from Ubiquiti Networks Ubiquiti Express and is part of the EdgeMAX series. A command injection vulnerability exists in EdgeSwitch versions prior to 1.9.1. The vulnerability stems from a guessable SIDSSL cookie in the administrator web interface of an older versi...