UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

CVE-2026-22557-PoC

CVE-2026-22557 -- UniFi Network Application 事前認証パストラバーサル UniFi Network Application のゲストポータル（/guest/s/site/login）における事前認証パストラバーサル。pageerror クエリパラメータが検証なしにリソースローダーへ渡されるため、認証されていない攻撃者がウェブアプリからファイル（例：WEB-INF/web.xml）を読み取ることができます。 ゲストポータルページがカスタマイズされている場合、リソースローダーはコンテキストルート外の基盤システム上の任意のファイルにアクセスできる生の...

Log4jUnifi

Log4jUnifi Unifi Network ApplicationにおけるCVE-2021-44228を悪用し、リモートコード実行などを可能にします。 もうひとつのLog4j炎上：Unifi なぜ？ この脆弱性の概念実証（PoC）は散在しており、手動で実施する必要があります。このリポジトリはそのエクスプロイトプロセスを自動化します。ポストエクスプロイトの手順については、上記のブログ記事を参照してください。 インストール このリポジトリは手動またはDockerで使用できます。 手動インストール...

cve-2026-22557-unifi-detection

CVE-2026-22557 — UniFi Network Application 検出...

CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 パストラバーサル Ubiquti UniFi Network Application このリポジトリは、UniFi Network Application を対象とした CVE-2026-22557 の Go ベースの概念実証スキャナーです。このツールは、一連の一般的なエンドポイントとトラバーサルペイロードに対して、制御された非破壊的なスキャンを実行し、潜在的に脆弱な動作を特定します。 概要 このプログラムは以下のように設計されています: IP アドレス、ホスト名、または完全な URL からターゲット URL を構築する いくつかの一般的な UniFi...

CVE-2026-22557-check

CVE-2026-22557 취약성 평가 도구 UniFi Network Application 컨트롤러가 CVE-2026-22557에 취약한지 여부를 중단 없이 안전하게 탐지합니다. 전체 분석 글은 Bishop Fox 블로그에서 확인하세요. 설명 CVE-2026-22557은 UniFi Network Application의 게스트 캡티브 포털에서 인증 없이 경로 탐색이 가능한 취약점으로, 원격 공격자가 컨트롤러 프로세스 사용자 권한으로 임의 파일을 읽을 수 있습니다 CVSS 10.0. 이 취약점은 10.1.x 브랜치의 UniFi...

EUVD-2026-66368

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77541

UniFi Network Application (Ubiquiti) is affected by an Improper Access Control vulnerability that allows an attacker with network access and high privileges to escalate privileges within the application. The flaw carries a CVSS 3.1 score of 9.1 (Critical) , with a network attack vector, low compl...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77535

CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

PT-2026-82054

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

PT-2026-82060

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77535: Improper Input Validation

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77541: Improper Access Control

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...