cve-2026-22557-unifi-detection

CVE-2026-22557 — UniFi Network Application 탐지...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 경로 탐색 Ubiquti UniFi 네트워크 애플리케이션 이 저장소는 UniFi 네트워크 애플리케이션을 대상으로 하는 CVE-2026-22557을 위한 Go 기반 개념 증명 스캐너를 포함합니다. 이 도구는 일반적인 엔드포인트 및 탐색 페이로드 세트에 대해 통제되고 비파괴적인 스캔을 수행하여 잠재적으로 취약한 동작을 식별합니다. 개요 이 프로그램은 다음을 위해 설계되었습니다: IP 주소, 호스트 이름 또는 전체 URL에서 대상 URL 구축 여러 일반적인 UniFi 엔드포인트 테스트 경로 탐색 변형과 같...

CVE-2026-22557-check

Инструмент оценки уязвимости CVE-2026-22557 Безопасно определяет, уязвим ли контроллер UniFi Network Application для CVE-2026-22557, не вызывая никаких нарушений. Смотрите полный анализ в блоге Bishop Fox. Описание CVE-2026-22557 — это неаутентифицированная уязвимость обхода пути в гостевом...

CVE-2026-22557-PoC

CVE-2026-22557 -- UniFi Network Application 사전 인증 경로 탐색 UniFi Network Application 게스트 포털/guest/s/site/login의 사전 인증 경로 탐색 취약점입니다. pageerror 쿼리 매개변수가 검증 없이 리소스 로더에 전달되어, 인증되지 않은 공격자가 웹앱 내부의 파일예: WEB-INF/web.xml을 읽을 수 있습니다. 게스트 포털 페이지가 사용자 지정된 경우, 리소스 로더가 컨텍스트 루트 외부의 기본 시스템에 있는 임의의 파일에 접근할 수 있는 원시...

Log4jUnifi

Log4jUnifi Unifi Network Application에서 CVE-2021-44228을 악용하여 원격 코드 실행 및 그 이상을 수행합니다. Another Log4j on the fire: Unifi 왜? 이 취약점에 대한 개념 증명은 곳곳에 흩어져 있고 수동으로 수행해야 합니다. 이 저장소는 악용 프로세스를 자동화합니다. 사후 악용에 대한 지침은 위의 블로그 게시물을 참조하세요. 설치 이 저장소는 수동으로 또는 Docker를 사용하여 사용할 수 있습니다. 수동 설치 악용 도구를 수동으로 다운로드하고 실행하려면 다음...

EUVD-2026-66368

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77541

UniFi Network Application (Ubiquiti) is affected by an Improper Access Control vulnerability that allows an attacker with network access and high privileges to escalate privileges within the application. The flaw carries a CVSS 3.1 score of 9.1 (Critical) , with a network attack vector, low compl...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77535

CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...

CVE-2026-56842

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed...

CVE-2026-55118

A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-55114

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-54406

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device...

CVE-2026-54405

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service DoS attack on the application...

CVE-2026-55114

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...