166 matches found
UniFi Network Application - Path Traversal
UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...
CVE-2026-22557-PoC
CVE-2026-22557 -- UniFi Network Application 预认证路径遍历 UniFi Network Application 访客门户（/guest/s/site/login）中存在预认证路径遍历漏洞。pageerror 查询参数未经校验即被传递给资源加载器，允许未认证的攻击者读取 Web 应用中的文件（例如 WEB-INF/web.xml）。 如果访客门户页面已被自定义，资源加载器似乎会回退到原始的 FileInputStream 分支，该分支可以访问上下文根目录之外底层系统上的任意文件。我尚未确认这一点，如果有时间将进一步调查。 用法...
Log4jUnifi
Log4jUnifi Unifi Network ApplicationにおけるCVE-2021-44228を悪用し、リモートコード実行などを可能にします。 もうひとつのLog4j炎上：Unifi なぜ？ この脆弱性の概念実証（PoC）は散在しており、手動で実施する必要があります。このリポジトリはそのエクスプロイトプロセスを自動化します。ポストエクスプロイトの手順については、上記のブログ記事を参照してください。 インストール このリポジトリは手動またはDockerで使用できます。 手動インストール...
cve-2026-22557-unifi-detection
CVE-2026-22557 — UniFi Network Application 检测 字段| 详情 ---|--- CVE| CVE-2026-22557 发布时间| 2026-03-19 CNA| HackerOne CVSS 评分| 10.0 严重 攻击向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 厂商| Ubiquiti Inc 产品| UniFi Network Application 描述 UniFi Network Application...
CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
CVE-2026-22557 パストラバーサル Ubiquti UniFi Network Application このリポジトリは、UniFi Network Application を対象とした CVE-2026-22557 の Go ベースの概念実証スキャナーです。このツールは、一連の一般的なエンドポイントとトラバーサルペイロードに対して、制御された非破壊的なスキャンを実行し、潜在的に脆弱な動作を特定します。 概要 このプログラムは以下のように設計されています: IP アドレス、ホスト名、または完全な URL からターゲット URL を構築する いくつかの一般的な UniFi...
CVE-2026-22557-check
CVE-2026-22557脆弱性評価ツール UniFi Network Application コントローラが CVE-2026-22557 に対して脆弱かどうかを、混乱を引き起こさずに安全に検出します。 Bishop Fox ブログの詳細な解説記事もご覧ください。 説明 CVE-2026-22557 は、UniFi Network Application のゲストキャプティブポータルにおける認証不要のパストラバーサル脆弱性であり、リモートの攻撃者がコントローラプロセスユーザーとして任意のファイルを読み取ることを可能にします（CVSS 10.0）。この脆弱性は、UniFi Networ...
EUVD-2026-66360
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
EUVD-2026-66368
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77541
UniFi Network Application (Ubiquiti) is affected by an Improper Access Control vulnerability that allows an attacker with network access and high privileges to escalate privileges within the application. The flaw carries a CVSS 3.1 score of 9.1 (Critical) , with a network attack vector, low compl...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77535
CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
PT-2026-82060
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
PT-2026-82054
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77535: Improper Input Validation
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77541: Improper Access Control
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...