166 matches found
UniFi Network Application - Path Traversal
UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...
CVE-2026-22557-PoC
CVE-2026-22557 -- UniFi Network Application 预认证路径遍历 UniFi Network Application 访客门户（/guest/s/site/login）中存在预认证路径遍历漏洞。pageerror 查询参数未经校验即被传递给资源加载器，允许未认证的攻击者读取 Web 应用中的文件（例如 WEB-INF/web.xml）。 如果访客门户页面已被自定义，资源加载器似乎会回退到原始的 FileInputStream 分支，该分支可以访问上下文根目录之外底层系统上的任意文件。我尚未确认这一点，如果有时间将进一步调查。 用法...
Log4jUnifi
Log4jUnifi 在 Unifi Network Application 中利用 CVE-2021-44228 实现远程代码执行等。 又一个 Log4j 问题：Unifi 为什么？ 针对此漏洞的概念验证代码分散且需要手动执行。本仓库自动化了利用过程。关于后渗透的指导，请参阅上面的博客文章。 安装 本仓库可手动使用或通过 Docker 使用。 手动安装 要手动下载并运行利用程序，请执行以下步骤。首先，确保攻击主机上已安装 Java 和 Maven。在基于 Debian 的操作系统上使用 apt 执行此操作，请运行以下命令： root@kitploit: apt update && ap...
cve-2026-22557-unifi-detection
CVE-2026-22557 — UniFi Network Application 检测 字段| 详情 ---|--- CVE| CVE-2026-22557 发布时间| 2026-03-19 CNA| HackerOne CVSS 评分| 10.0 严重 攻击向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 厂商| Ubiquiti Inc 产品| UniFi Network Application 描述 UniFi Network Application...
CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
CVE-2026-22557 路径遍历 Ubiquti UniFi Network Application 本仓库包含一个基于 Go 的 CVE-2026-22557 概念验证扫描器，目标针对 UniFi Network Application。该工具针对一组常见端点和遍历载荷执行受控且非破坏性的扫描，以识别潜在的可被利用行为。 概述 该程序设计用于： 从 IP 地址、主机名或完整 URL 构建目标 URL 测试多个常见的 UniFi 端点 发送诸如路径遍历变体之类的遍历载荷 报告可疑响应和可能的漏洞指标 以安全、信息收集模式运行，不修改目标系统 依赖要求 Go 1.21 或更高版本...
CVE-2026-22557-check
CVE-2026-22557 漏洞评估工具 安全检测 UniFi Network Application 控制器是否存在 CVE-2026-22557 漏洞，且不会造成任何中断。请参阅 Bishop Fox 博客上的 完整报告。 描述 CVE-2026-22557 是 UniFi Network Application 客户强制门户中一个未经认证的路径遍历漏洞，允许远程攻击者以控制器进程用户的身份读取任意文件（CVSS 10.0）。该漏洞影响 10.1.x 分支上 UniFi Network Application 10.1.85 及更早版本，以及 10.2.x 和 9.0.x...
EUVD-2026-66368
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
EUVD-2026-66360
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77541
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77541
UniFi Network Application (Ubiquiti) is affected by an Improper Access Control vulnerability that allows an attacker with network access and high privileges to escalate privileges within the application. The flaw carries a CVSS 3.1 score of 9.1 (Critical) , with a network attack vector, low compl...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77535
CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...
CVE-2026-77535
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
PT-2026-82054
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
PT-2026-82060
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...
CVE-2026-77535: Improper Input Validation
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
CVE-2026-77541: Improper Access Control
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...