CVE-2023-41721

CVE-2023-41721: Affects UniFi Network Application run on a UniFi Gateway Console with versions 7.5.176 and earlier, exposing an improper access control flaw in device adoption. This could allow a malicious actor with preexisting network access to reach device configuration information. Affected p...

CVE-2024-42025

The CVE-2024-42025 entry concerns a Command Injection flaw in Self-Hosted UniFi Network Server deployments running UniFi Network Application

CVE-2026-55114

The CVE-2026-55114 entry concerns UniFi Network Application. Affected component: the UniFi Network Application itself, with an Improper Access Control vulnerability that allows a user with network access and low privileges to escalate privileges within the application. The CVSSv3.1 vector (AV:N/A...

CVE-2026-54406

CVE-2026-54406 : A Path Traversal vulnerability affects self-hosted instances of UniFi Network Application. The issue allows a malicious actor with network access and high privileges to escalate write permissions on the host device. Affected component: path traversal in the application’s handling...

CVE-2023-28365

Summary (verified): CVE-2023-28365 is a backup file vulnerability in UniFi applications (≤ 7.3.83) on Linux that allows an administrator to execute malicious commands on the host during a restore. The NVD entry lists a high-severity CVSSv3.1 base score (9.1) with network attack vector, high impac...

CVE-2026-54405

CVE-2026-54405 affects UniFi Network Application. The root cause is an improper input validation issue that could allow a network-access attacker to cause a Denial of Service on the application. Impact: availability loss (CVSSv3.1 base score 7.5, HIGH). Exploitation details are not provided in th...

CVE-2023-32000

CVE-2023-32000 is a Cross-Site Scripting (XSS) flaw in UniFi Network versions 7.3.83 and earlier. The impact is privilege escalation by convincing a Site Administrator to visit a malicious page, requiring administrator credentials and user interaction. Mitigation per the connected PT-2023-23565 a...

CVE-2026-56842

CVE-2026-56842 : A vulnerability in UniFi Network Application allows a malicious actor with network access to persist privileges after the access is removed, due to an Incorrect Authorization flaw. The CVSS v3.1 base score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. Affected co...

CVE-2026-55118

CVE-2026-55118 concerns UniFi Network Application with an Improper Access Control flaw that could allow a malicious actor with network access and low privileges to escalate privileges within the UniFi Network Application. The connected records provide CVSS 3.1 details (AV:N/AC:L/PR:L/UI:N/S:U/C:L...