72 matches found
UniFi Access - Broken Access Control
UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access. id: CVE-2025-52665 info: name:...
EUVD-2026-66402
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...
EUVD-2026-66391
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
EUVD-2026-66392
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
EUVD-2026-66384
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77553
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...
CVE-2026-77547
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77546
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77553
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...
CVE-2026-77553
CVE-2026-77553 is a CRITICAL (CVSS 9.9) Improper Access Control vulnerability in the UniFi Access Application (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges on the host device , with high impact on confidentiality, integrity, and availability. The att...
CVE-2026-77547
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77547
CVE-2026-77547 affects the UniFi Access Application (CNA: Ubiquiti). An Improper Input Validation flaw allows a network-based attacker with low privileges to achieve Command Injection on the host device, rated CVSS 9.9 (Critical) with changed scope and high impact across confidentiality, integrit...
CVE-2026-77546
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77546
UniFi Access Application is affected by an Improper Input Validation flaw that allows a low-privileged actor with network access to execute Command Injection on the host device. The CNA-assigned CVSS v3.1 score is 9.9 (CRITICAL) with a changed scope and high impact across confidentiality, integri...
CVE-2026-77543
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77543
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2026-77543
An Improper Input Validation vulnerability in the UniFi Access Application (Ubiquiti) allows a network-adjacent actor with low privileges to achieve command injection on the host device, rated CVSS 9.9 (Critical) with changed scope. The attack requires no user interaction and has low complexity. ...
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 CVSS score:...