Lucene search
K

51 matches found

Packet Storm News
Packet Storm News
added 3 days ago5 views

UniFi Network Application Path Traversal Vulnerability Assessment Tool

This tool lets you safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557 without causing any disruption. CVE-2026-22557 is an unauthenticated path traversal vulnerability in the UniFi Network Application's guest captive portal that allows remote attackers to...

10CVSS6.2AI score0.00032EPSS
Exploits2
GithubExploit
GithubExploit
added 6 days ago56 views

Exploit for CVE-2026-22557

CVE-2026-22557 Vulnerability Assessment Tool Safely detect wh...

10CVSS6.3AI score0.00032EPSS
Exploits2
GithubExploit
GithubExploit
added 2026/04/11 2:21 p.m.73 views

Exploit for CVE-2026-22557

CVE-2026-22557 -- UniFi Network Application Pre-Auth Path Trav...

10CVSS6AI score0.00032EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.2 views

CVE-2026-22557

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account...

10CVSS6AI score0.00032EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:57 p.m.1 views

CVE-2026-22558

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges...

7.7CVSS6AI score0.00017EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/19 3:31 p.m.3 views

EUVD-2026-13101

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account...

10CVSS5.7AI score0.00032EPSS
Exploits2References2
EUVD
EUVD
added 2026/03/19 3:31 p.m.1 views

EUVD-2026-13104

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges...

7.7CVSS5.8AI score0.00017EPSS
Exploits0References2
NVD
NVD
added 2026/03/19 3:16 p.m.0 views

CVE-2026-22558

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges...

7.7CVSS0.00017EPSS
Exploits0References1
NVD
NVD
added 2026/03/19 3:16 p.m.3 views

CVE-2026-22557

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account...

10CVSS0.00032EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2026/03/19 2:24 p.m.2 views

CVE-2026-22558

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges...

7.7CVSS5.8AI score0.00017EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/03/19 2:24 p.m.40 views

CVE-2026-22558

CVE-2026-22558 affects the UniFi Network Application. An "Authenticated NoSQL Injection" vulnerability could allow a malicious actor with authenticated network access to escalate privileges. The CVE entry provides a CVSS v3.1 vector ( NETWORK, LOW complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, S...

7.7CVSS5.8AI score0.00017EPSS
Exploits0References1
CVE
CVE
added 2026/03/19 2:24 p.m.324 views

CVE-2026-22557

CVE-2026-22557 affects UniFi Network Application. A pre-auth path traversal in the guest portal (URL pattern /guest/s/{site}/login) allows an unauthenticated attacker to cause a resource loader to read files from the underlying system (e.g., WEB-INF/web.xml) due to unvalidated input. An exploit P...

10CVSS5.7AI score0.00032EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2026/03/19 2:24 p.m.4 views

CVE-2026-22557

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account...

10CVSS5.7AI score0.00032EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2026/03/19 2:24 p.m.15 views

CVE-2026-22558

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges...

7.7CVSS0.00017EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/19 2:24 p.m.2 views

CVE-2026-22557

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account...

10CVSS5.7AI score0.00032EPSS
Exploits2References1
Cvelist
Cvelist
added 2026/03/19 2:24 p.m.20 views

CVE-2026-22557

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account...

10CVSS0.00032EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2026/03/19 2:24 p.m.1 views

CVE-2026-22558

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges...

7.7CVSS5.8AI score0.00017EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/19 12:0 a.m.3 views

FreeBSD : UniFi Network Application - Multiple vulnerabilities (71b4ce56-23c5-11f1-b865-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 71b4ce56-23c5-11f1-b865-b42e991fc52e advisory...

10CVSS6AI score0.00032EPSS
Exploits2References5
CNNVD
CNNVD
added 2026/03/19 12:0 a.m.3 views

Ubiquiti UniFi Network Application 安全漏洞

The Ubiquiti UniFi Network Application is a centralized management and monitoring platform for network devices and wireless networks developed by the Ubiquiti company. The Ubiquiti UniFi Network Application has a security vulnerability, which stems from an authenticated NoSQL injection. Malicious...

7.7CVSS6AI score0.00017EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2026/03/19 12:0 a.m.8 views

UniFi Network Application - Multiple vulnerabilities

https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b reports: An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges. A...

10CVSS5.7AI score0.00032EPSS
Exploits2References2
Rows per page
Query Builder