Ubiquiti Inc Uisp Application
4 CVEs affecting Ubiquiti Inc Uisp Application. Latest disclosed: 2025-08-29. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-24290 | Critical | 9.9 | 2025-06-29 | Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges… |
CVE-2025-27217 | Critical | 9.1 | 2025-08-21 | A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application… |
CVE-2025-27216 | High | 8.8 | 2025-08-21 | Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges. |
CVE-2025-48979 | Low | 3.4 | 2025-08-29 | An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access. |