Ubiquiti Inc Unifi Network Application
11 CVEs affecting Ubiquiti Inc Unifi Network Application. Latest disclosed: 2026-07-02. Critical: 2, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-22557 | Critical | 10.0 | 2026-03-19 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underly… |
CVE-2024-27981 | Critical | 9.8 | 2024-04-04 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a mal… |
CVE-2026-55114 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to es… |
CVE-2024-42028 | High | 8.8 | 2024-10-28 | A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a mal… |
CVE-2026-54406 | High | 8.7 | 2026-07-02 | A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network A… |
CVE-2026-55118 | High | 8.3 | 2026-07-02 | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi… |
CVE-2024-42025 | High | 7.8 | 2024-09-13 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a mal… |
CVE-2026-22558 | High | 7.7 | 2026-03-19 | An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to esc… |
CVE-2026-56842 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Applica… |
CVE-2026-54405 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of… |
CVE-2025-24292 | Medium | 6.8 | 2025-06-29 | A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a dev… |