CVE-Ubiquiti

CVE-Ubiquiti Ubiquiti UniFi Security Vulnerabilities This repository contains information and resources related to the following Ubiquiti UniFi security vulnerabilities: CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554...

Ubiquiti-CVE

Ubiquiti-CVE ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -...

CVE-2026-22557

🛡️ CVE-2026-22557 - Critical Path Traversal Vulnerability in Ubiquiti UniFi Network Application 📋 Overview A critical unauthenticated path traversal vulnerability CWE-22 exists in the Ubiquiti UniFi Network Application UniFi Controller. An attacker with network access can exploit this flaw to:...

pyrmax

pyrmax Decoder and encoder for Ubiquiti AirMAX wire-protocol frames, covering both the AC WA firmware and M XW/XM firmware series. Decode of the cleartext outer headers is driven by Kaitai Struct schemas under ksy/. The AC payload version-gated, switched on msgtype, with the deauth XOR-unmask is...

pyrmax

pyrmax Decoder und Encoder für Ubiquiti-AirMAX-Wire-Protokoll-Frames, die sowohl die AC-Serie WA-Firmware als auch die M-Serie XW/XM-Firmware abdecken. Dekodierung der Klartext-äußeren Header erfolgt über Kaitai Struct-Schemata unter ksy/. Die AC-Nutzlast versionsabhängig, umgeschaltet über...

Malicious Package

Overview ubiquiti-agents-link-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview ubiquiti-agents-link-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-16409 Malicious code in ubiquiti-agents-link-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8827e987697ea6ef619055c53ae1654800a838c18419ffc8a09e872c6f16adc4 The package's bin entry index.js runs execSync'id' and collects os.userInfo.username and os.hostname, then HTTPS-POSTs the JSON payload to the...

Malicious code in ubiquiti-agents-link-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8827e987697ea6ef619055c53ae1654800a838c18419ffc8a09e872c6f16adc4 The package's bin entry index.js runs execSync'id' and collects os.userInfo.username and os.hostname, then HTTPS-POSTs the JSON payload to the...

Malicious Package

Overview ubiquiti-agents-link-mcp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Ubiquiti UniFi OS Server < 5.1.37 Multiple Vulnerabilities

The version of Ubiquiti UniFi OS Server installed on the remote host is prior to 5.1.37. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability fou...

Vulnerabilities found in Ubiquiti’s UniFi products

Ubiquiti has identified vulnerabilities in various UniFi products, including UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge, and UniFi Talk. The...

Ubiquiti AirOS 6.x - SSH Key Upload

Path traversal file upload via /login.cgi places an attacker SSH public key into /etc/dropbear/authorizedkeys, enabling login as ubnt. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti AirOS 6.x arbitrary file upload to authorizedkeys.""" from future import annotations import io import tempfi...

Ubiquiti AirOS - Unauthenticated CLI RCE

Exploits AirOS unauthenticated CLI execution via multipart POST to admin.cgi/sd.css with a forged AIROSSESSIONID cookie. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti AirOS unauthenticated CLI RCE.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Ubiquiti AirOS - Unauthenticated CLI RCE Detection

Detects AirOS unauth RCE by POSTing multipart exec=cat /etc/passwd&action=cli to /admin.cgi/sd.css with a forged AIROSSESSIONID cookie. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AirOS unauth RCE by POSTing multipart exec=cat /etc/passwd&action=cli to /admin.""" import re from kittysplo...

airCube Login - Detect

airCube login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """airCube login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'airCube Login - Detect', 'description': 'airCube login...

Ubiquiti EdgeRouter - Login Panel Detection

Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN features, running EdgeOS Ubiquiti's Vyatta-based firmware. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN feature...

Ubiquiti UniFi Security Gateway - Login Panel Detection

Ubiquiti UniFi Security Gateway management panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti UniFi Security Gateway management panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection...

Ubiquiti UniFi OS Improper Access Control Vulnerability

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system...