CVE-2026-22557

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account...

CVE-2026-22557

CVE-2026-22557 affects UniFi Network Application. A pre-auth path traversal in the guest portal (URL pattern /guest/s/{site}/login) allows an unauthenticated attacker to cause a resource loader to read files from the underlying system (e.g., WEB-INF/web.xml) due to unvalidated input. An exploit P...

CVE-2026-22558

CVE-2026-22558 affects the UniFi Network Application. An "Authenticated NoSQL Injection" vulnerability could allow a malicious actor with authenticated network access to escalate privileges. The CVE entry provides a CVSS v3.1 vector ( NETWORK, LOW complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, S...

Ubiquiti UniFi Network Application 安全漏洞

The Ubiquiti UniFi Network Application is a centralized management and monitoring platform for network devices and wireless networks developed by the Ubiquiti company. The Ubiquiti UniFi Network Application has a security vulnerability, which stems from an authenticated NoSQL injection. Malicious...

UniFi Network Application - Multiple vulnerabilities

https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b reports: An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges. A...

FreeBSD : UniFi Network Application - Multiple vulnerabilities (71b4ce56-23c5-11f1-b865-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 71b4ce56-23c5-11f1-b865-b42e991fc52e advisory...

PT-2026-26245

CVE-2026-22558 An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate p… https://t.co/S5nBVd04cr...

PT-2026-26169

Name of the Vulnerable Software and Affected Versions UniFi Network Application versions prior to 10.1.89 Description A Path Traversal issue exists due to improper restriction of directory path names. This allows an unauthenticated malicious actor with network access to access files on the...

EUVD-2021-2607

Malware in sbrugna...

EUVD-2025-12151

Malicious code in bioql PyPI...

EUVD-2025-21129

Malicious code in bioql PyPI...

Ubiquiti Networks UniFi Network Application 安全漏洞

Ubiquiti Networks UniFi Network Application is a network management software from Ubiquiti, Inc. that allows users to manage a variety of devices in a network including, but not limited to, wireless access points APs, switches, routers, etc. through a centralized interface. A security vulnerabili...

CVE-2024-27981

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers Linux with UniFi Network Application Version 8.0.28 and earlier allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device. Affected Products:...

CVE-2023-41721

Instances of UniFi Network Application that i are run on a UniFi Gateway Console, and ii are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to t...

PT-2025-17652

Name of the Vulnerable Software and Affected Versions BusyBox versions through 1.37.0 Description The issue allows local users to launch a network application with an argv0 containing an ANSI terminal escape sequence. This can lead to a denial of service when netstat is used by a victim, causing...

CVE-2024-6351 Malformed packet leads to denial of service in NWK/APS layer

A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert...

Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization

The Apache Software Foundation ASF has released patches to address a maximum severity vulnerability in the MINA Java network application framework that could result in remote code execution under specific conditions. Tracked as CVE-2024-52046 , the vulnerability carries a CVSS score of 10.0. It...

Ubiquiti Networks UniFi Network Application 安全漏洞

Ubiquiti Networks UniFi Network Application is a network management software from Ubiquiti, Inc. that allows users to manage a variety of devices in a network including, but not limited to, wireless access points APs, switches, routers, etc. through a centralized interface. A security vulnerabili...

CVE-2024-42025

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers Linux with UniFi Network Application Version 8.3.32 and earlier allows a malicious actor with unifi user shell access to escalate privileges to root on the host device...

CVE-2024-42025

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers Linux with UniFi Network Application Version 8.3.32 and earlier allows a malicious actor with unifi user shell access to escalate privileges to root on the host device...