Ubiquiti Inc
Page 2 of 2 — Ubiquiti Inc CVEs from a corpus of 110, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-23091 | Medium | 5.9 | 2025-02-01 | An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM… |
CVE-2024-42028 | High | 8.8 | 2024-10-28 | A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a mal… |
CVE-2024-42025 | High | 7.8 | 2024-09-13 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a mal… |
CVE-2024-29208 | Low | 2.2 | 2024-05-07 | An Unverified Password Change could allow a malicious actor with API access to the device to change the system password without knowing the previous password. … |
CVE-2024-29207 | High | 7.5 | 2024-05-07 | An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of the system. Affected Products: Uni… |
CVE-2024-29206 | Low | 2.2 | 2024-05-07 | An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) and make unsupported changes to the syst… |
CVE-2024-27981 | Critical | 9.8 | 2024-04-04 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a mal… |
CVE-2024-22054 | High | 7.5 | 2024-02-20 | A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discov… |
CVE-2023-38034 | Critical | 9.8 | 2023-08-10 | A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Cod… |
CVE-2023-35085 | Critical | 9.8 | 2023-08-10 | An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled co… |