1011 matches found
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
EUVD-2026-66360
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77534
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...
CVE-2026-77534
CVE-2026-77534 is an Improper Access Control vulnerability affecting certain devices running UniFi OS (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges within affected UniFi OS devices or instances. The CNA-assigned CVSS 3.1 score is 9.9 (CRITICAL) , ref...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
EUVD-2026-66378
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77533
UniFi Protect Application (Ubiquiti) is affected by an Improper Input Validation flaw that enables Command Injection on the host device. An attacker with network access and low privileges can exploit this without user interaction. The CVSS 3.1 score is 9.9 (Critical) , reflecting changed scope wi...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application يحتوي هذا المستودع على ماسح ضوئي PoC مبني بلغة Go لثغرة CVE-2026-22557 التي تستهدف تطبيق UniFi Network. تقوم الأداة بإجراء فحص محكوم وغير مدمر لمجموعة من نقاط النهاية الشائعة وحمولات اجتياز المسار لتحديد السلوكيات التي قد تكون عرضة...
PT-2026-82056
Name of the Vulnerable Software and Affected Versions UniFi Protect Application affected versions not specified Description An improper input validation flaw allows a network-based actor to perform command injection on the host device. Command injection is a technique where an attacker executes...
PT-2026-82085
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...
PT-2026-82073
Name of the Vulnerable Software and Affected Versions UniFi OS affected versions not specified Description An Improper Neutralization of CRLF Sequences Carriage Return Line Feed occurs in certain devices. This issue allows a malicious actor with network access to bypass authentication to the syst...
Log4jUnifi
Log4jUnifi Sfruttamento di CVE-2021-44228 nella Unifi Network Application per esecuzione remota di codice e altro. Another Log4j on the fire: Unifi Perché? Le prove di concetto per questa vulnerabilità sono sparse e devono essere eseguite manualmente. Questo repository automatizza il processo di...
CVE-2026-34908-check
Script di rilevamento della catena RCE non autenticata su UniFi OS Server Un rilevatore sicuro per la catena di esecuzione remota di codice non autenticata in UniFi OS Server ≤ 5.0.6, divulgato in Ubiquiti Security Advisory Bulletin 064: CVE| Classe| Ruolo nella catena ---|---|--- CVE-2026-34908 ...
CVE-2026-22557-check
CVE-2026-22557 Strumento di Valutazione della Vulnerabilità Rileva in modo sicuro se un controller UniFi Network Application è vulnerabile a CVE-2026-22557 senza causare alcuna interruzione. Vedi l'analisi completa sul blog di Bishop Fox. Descrizione CVE-2026-22557 è una vulnerabilità di...
CVE-2026-34910-unifi-poc
UniFi OS CVE Proof of Concept Proof of Concept für autorisierte Tests gegen zwei Pfade, die wie folgt identifiziert wurden: CVE-2026-34910: Auth-Bypass, der zu Command Injection und Remote Code Execution über den Handler für Paketupdates führen kann. CVE-2026-34909: Path Traversal, der zu...
Exploit for Improper Input Validation in Ui Unifi_Os_Server
CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE...
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 CVSS score:...
Ubiquiti UniFi OS < 5.1.12 Multiple Vulnerabilities
According to its self-reported version, the remote Ubiquiti UniFi OS device is prior to 5.1.12. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make...