CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 パストラバーサル Ubiquti UniFi Network Application このリポジトリは、UniFi Network Application を対象とした CVE-2026-22557 の Go ベースの概念実証スキャナーです。このツールは、一連の一般的なエンドポイントとトラバーサルペイロードに対して、制御された非破壊的なスキャンを実行し、潜在的に脆弱な動作を特定します。 概要 このプログラムは以下のように設計されています: IP アドレス、ホスト名、または完全な URL からターゲット URL を構築する いくつかの一般的な UniFi...

CVE-2026-22557-check

CVE-2026-22557脆弱性評価ツール UniFi Network Application コントローラが CVE-2026-22557 に対して脆弱かどうかを、混乱を引き起こさずに安全に検出します。 Bishop Fox ブログの詳細な解説記事もご覧ください。 説明 CVE-2026-22557 は、UniFi Network Application のゲストキャプティブポータルにおける認証不要のパストラバーサル脆弱性であり、リモートの攻撃者がコントローラプロセスユーザーとして任意のファイルを読み取ることを可能にします（CVSS 10.0）。この脆弱性は、UniFi Networ...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

CVE-2026-22557-PoC

CVE-2026-22557 -- UniFi Network Application 预认证路径遍历 UniFi Network Application 访客门户（/guest/s/site/login）中存在预认证路径遍历漏洞。pageerror 查询参数未经校验即被传递给资源加载器，允许未认证的攻击者读取 Web 应用中的文件（例如 WEB-INF/web.xml）。 如果访客门户页面已被自定义，资源加载器似乎会回退到原始的 FileInputStream 分支，该分支可以访问上下文根目录之外底层系统上的任意文件。我尚未确认这一点，如果有时间将进一步调查。 用法...

Log4jUnifi

Log4jUnifi Unifi Network ApplicationにおけるCVE-2021-44228を悪用し、リモートコード実行などを可能にします。 もうひとつのLog4j炎上：Unifi なぜ？ この脆弱性の概念実証（PoC）は散在しており、手動で実施する必要があります。このリポジトリはそのエクスプロイトプロセスを自動化します。ポストエクスプロイトの手順については、上記のブログ記事を参照してください。 インストール このリポジトリは手動またはDockerで使用できます。 手動インストール...

cve-2026-22557-unifi-detection

CVE-2026-22557 — UniFi Network Application 检测 字段| 详情 ---|--- CVE| CVE-2026-22557 发布时间| 2026-03-19 CNA| HackerOne CVSS 评分| 10.0 严重 攻击向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 厂商| Ubiquiti Inc 产品| UniFi Network Application 描述 UniFi Network Application...

EUVD-2026-66368

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77535

CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-55118

A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-54406

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device...

CVE-2026-54405

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service DoS attack on the application...

EUVD-2026-41402

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed...

CVE-2026-56842

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed...

CVE-2026-55114

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-56842

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed...