CVE-Ubiquiti

CVE-Ubiquiti Ubiquiti UniFi セキュリティ脆弱性 このリポジトリには、以下のUbiquiti UniFiセキュリティ脆弱性に関連する情報とリソースが含まれています： CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554 CVE-2026-77557 寄付...

EUVD-2026-66382

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

EUVD-2026-66363

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

EUVD-2026-66398

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances...

EUVD-2026-66390

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

EUVD-2026-66399

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances...

EUVD-2026-66366

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

EUVD-2026-66367

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

CVE-2026-22557-PoC

CVE-2026-22557 -- UniFi Network Application 事前認証パストラバーサル UniFi Network Application のゲストポータル（/guest/s/site/login）における事前認証パストラバーサル。pageerror クエリパラメータが検証なしにリソースローダーへ渡されるため、認証されていない攻撃者がウェブアプリからファイル（例：WEB-INF/web.xml）を読み取ることができます。 ゲストポータルページがカスタマイズされている場合、リソースローダーはコンテキストルート外の基盤システム上の任意のファイルにアクセスできる生の...

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

UniFi Access - Broken Access Control

UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access. id: CVE-2025-52665 info: name:...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

UniFi OS - Authentication Bypass via Path Traversal (..%2f)

UniFi OS devices contain an improper access control vulnerability caused by insufficient authorization checks, letting network attackers make unauthorized system changes, exploit requires network access. id: CVE-2026-34908 info: name: UniFi OS - Authentication Bypass via Path Traversal ..%2f...

cve-2026-22557-unifi-detection

CVE-2026-22557 — UniFi Network Application 탐지...

CVE-2026-22557

🛡️ CVE-2026-22557 - Критическая уязвимость обхода пути в Ubiquiti UniFi Network Application 📋 Обзор Критическая уязвимость обхода пути без аутентификации CWE-22 существует в приложении Ubiquiti UniFi Network UniFi Controller. Злоумышленник, имеющий сетевой доступ , может использовать эту уязвимост...

CVE-2016-6914-UniFiVideo-LPE

CVE-2016-6914 - Ubiquiti UniFi Video 3.7.3 LPE PoC 🔥 Visão Geral Este repositório contém uma prova de conceito PoC para CVE-2016-6914 , uma vulnerabilidade de Elevação Local de Privilégio LPE que afeta Ubiquiti UniFi Video 3.7.3. Um atacante com privilégios baixos pode substituir um binário...

CVE-2026-36851

CVE-2026-36851 路径遍历/任意文件读取漏洞，存在于 UnPoller v2.33.0 中，通过 file:// 密码前缀触发。文件内容从磁盘读取并在认证期间传输到配置的 UniFi 控制器 URL。...

CVE-2026-77547

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

CVE-2026-77550

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances...

CVE-2026-77549

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances...