55 matches found
EUVD-2026-66365
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...
EUVD-2026-66400
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...
CVE-2026-77551
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...
CVE-2026-77551
An Improper Access Control vulnerability in UniFi Connect Display Cast Pro allows a network-based attacker, under certain conditions, to escalate privileges on the device. The flaw is scored CVSS 9.0 (CRITICAL) with a changed scope and high impact on confidentiality, integrity, and availability. ...
CVE-2026-77538
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...
CVE-2026-77538
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...
CVE-2026-77538
An Improper Access Control vulnerability in the UniFi Connect Application (Ubiquiti) allows a network-based attacker with no prior privileges to escalate privileges within the application. The CVSS 3.1 score is 8.2 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L, indicating a low-comp...
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 CVSS score:...
CVE-2026-50746
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device...
CVE-2026-50746
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device...
CVE-2026-50746
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device...
CVE-2026-50746
CVE-2026-50746 describes an "Improper Access Control" vulnerability in UniFi Connect Application that could allow a malicious actor with network access to perform a Command Injection on the host device. The publicly provided descriptions indicate the issue enables remote command execution with no...
EUVD-2026-41389
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device...
PT-2026-55231
Name of the Vulnerable Software and Affected Versions UniFi Connect Application versions prior to 3.4.17 Description An improper access control flaw exists in the UniFi Connect Application. A malicious actor with network access can exploit this issue to execute arbitrary commands on the host devi...
EUVD-2024-26223
Malicious code in bioql PyPI...
EUVD-2024-26224
Malicious code in bioql PyPI...
EUVD-2025-25442
Malicious code in bioql PyPI...
EUVD-2025-25443
Malicious code in bioql PyPI...
EUVD-2025-27734
Malicious code in bioql PyPI...
CVE-2025-27213
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge ADB and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Pro Version 1.5.18 and earlier UniFi Connect Display Versio...