232 matches found
EUVD-2026-66404
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...
EUVD-2026-66393
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
EUVD-2026-66364
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77557
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...
CVE-2026-77548
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77557
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...
CVE-2026-77557
CVE-2026-77557 is a critical (CVSS 9.8) Improper Access Control vulnerability in UniFi Protect AI Key . A malicious actor with network access can exploit it to escalate privileges on the device, with no prior authentication required (PR:N). The attack vector is network-based with low complexity, ...
CVE-2026-77548
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77548
CVE-2026-77548 affects the UniFi Protect Application (Ubiquiti). An Improper Input Validation flaw allows a low-privileged actor with network access to trigger a Command Injection on the host device, rated CVSS 9.9 Critical with changed scope (full compromise of confidentiality, integrity, and av...
CVE-2026-77537
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77537
CVE-2026-77537 is a CRITICAL (CVSS 10.0) vulnerability in UniFi Protect Application by Ubiquiti, rated by the vendor. An Improper Input Validation flaw allows a network-based attacker with no prior privileges and no user interaction to perform a Command Injection on the host device. The changed s...
CVE-2026-77537
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
EUVD-2026-66378
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77533
UniFi Protect Application (Ubiquiti) is affected by an Improper Input Validation flaw that enables Command Injection on the host device. An attacker with network access and low privileges can exploit this without user interaction. The CVSS 3.1 score is 9.9 (Critical) , reflecting changed scope wi...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
PT-2026-82056
Name of the Vulnerable Software and Affected Versions UniFi Protect Application affected versions not specified Description An improper input validation issue allows a network-connected actor to perform command injection on the host device. Command injection is a flaw where an attacker can execut...
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 CVSS score:...