Ui
9 CVEs across 311 Ui products. Browse Ui vulnerabilities, severities, and proof-of-concept exploits.
Ui products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-56842 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Applica… |
CVE-2026-56841 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application t… |
CVE-2026-55119 | High | 8.1 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escal… |
CVE-2026-55118 | High | 8.3 | 2026-07-02 | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi… |
CVE-2026-55117 | High | 8.6 | 2026-07-02 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device. |
CVE-2026-55116 | Critical | 9.0 | 2026-07-02 | A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain d… |
CVE-2026-55115 | Critical | 9.9 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate pri… |
CVE-2026-55114 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to es… |
CVE-2026-55113 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Deni… |
CVE-2026-55112 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in Un… |
CVE-2026-55111 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniF… |
CVE-2026-55110 | High | 7.5 | 2026-07-02 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS t… |
CVE-2026-54409 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Applica… |
CVE-2026-54408 | High | 8.6 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication… |
CVE-2026-54407 | High | 8.6 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication… |
CVE-2026-54406 | High | 8.7 | 2026-07-02 | A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network A… |
CVE-2026-54405 | High | 7.5 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of… |
CVE-2026-54404 | High | 8.8 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to esca… |
CVE-2026-54403 | High | 8.6 | 2026-07-02 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of… |
CVE-2026-54402 | Critical | 9.9 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command… |
CVE-2026-54401 | High | 7.7 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS… |
CVE-2026-54400 | Critical | 9.1 | 2026-07-02 | A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to es… |
CVE-2026-50748 | Critical | 9.9 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to e… |
CVE-2026-50747 | Critical | 9.9 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Appli… |
CVE-2026-50746 | Critical | 10.0 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Inj… |
CVE-2026-34911 | High | 7.7 | 2026-05-22 | A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the u… |
CVE-2026-34910 | Critical | 10.0 | 2026-05-22 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. |
CVE-2026-34909 | Critical | 10.0 | 2026-05-22 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system th… |
CVE-2026-34908 | Critical | 10.0 | 2026-05-22 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to t… |
CVE-2026-33000 | Critical | 9.1 | 2026-05-22 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute… |
CVE-2026-21639 | High | 8.8 | 2026-01-08 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE… |
CVE-2026-21638 | High | 8.8 | 2026-01-08 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE… |
CVE-2026-21635 | Medium | 5.3 | 2026-01-05 | An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device th… |
CVE-2026-21634 | Medium | 6.5 | 2026-01-05 | A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it t… |
CVE-2026-21633 | High | 8.8 | 2026-01-05 | A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerabili… |
CVE-2025-59467 | High | 7.5 | 2026-01-05 | A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and earlier) could allow privilege escalation if an Administrator… |
CVE-2025-52665 | Critical | 10.0 | 2025-10-31 | A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a manag… |
CVE-2024-42025 | High | 7.8 | 2024-09-13 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a mal… |
CVE-2023-41721 | Medium | 5.3 | 2023-10-25 | Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with… |
CVE-2023-38034 | Critical | 9.8 | 2023-08-10 | A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Cod… |
CVE-2023-35085 | Critical | 9.8 | 2023-08-10 | An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled co… |
CVE-2023-31998 | High | 7.5 | 2023-07-18 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. |
CVE-2023-32000 | Medium | 4.8 | 2023-07-08 | A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to… |
CVE-2023-31997 | Critical | 9.0 | 2023-07-01 | UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that… |
CVE-2023-28365 | Critical | 9.1 | 2023-07-01 | A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to ex… |
CVE-2023-2379 | High | 7.5 | 2023-04-28 | A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service… |
CVE-2023-2378 | High | 7.2 | 2023-04-28 | A flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown function of the component Web Management Interface. This manipulat… |
CVE-2023-2377 | High | 7.2 | 2023-04-28 | A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interfa… |
CVE-2023-2376 | High | 7.2 | 2023-04-28 | A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element is an unknown function of the component Web Mana… |
CVE-2023-2375 | High | 7.2 | 2023-04-28 | A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Execut… |
CVE-2023-2374 | High | 7.2 | 2023-04-28 | A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management I… |
CVE-2023-2373 | High | 7.2 | 2023-04-28 | A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management Interface… |
CVE-2023-28124 | Medium | 5.5 | 2023-04-19 | Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration file… |
CVE-2023-28123 | Medium | 5.5 | 2023-04-19 | A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting… |
CVE-2023-28122 | High | 7.8 | 2023-04-19 | A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Wind… |
CVE-2023-1458 | High | 7.2 | 2023-03-25 | A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2023-1457 | High | 7.2 | 2023-03-25 | A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component Static R… |
CVE-2023-1456 | High | 7.2 | 2023-03-25 | A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the co… |
CVE-2023-24104 | Critical | 9.8 | 2023-02-23 | Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets. |
CVE-2023-23912 | High | 8.8 | 2023-02-09 | A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix… |
CVE-2023-23119 | Medium | 5.9 | 2023-02-02 | The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and… |
CVE-2022-44565 | Medium | 5.3 | 2022-12-23 | An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a… |
CVE-2022-43553 | High | 8.8 | 2022-12-05 | A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary ad… |
CVE-2022-35257 | High | 7.8 | 2022-09-23 | A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a Windows dev… |
CVE-2022-22570 | Critical | 10.0 | 2022-04-01 | A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who ha… |
CVE-2021-44530 | Critical | 9.8 | 2022-01-14 | An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to… |
CVE-2021-44527 | Medium | 6.5 | 2021-12-07 | A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a D… |
CVE-2021-22957 | High | 8.8 | 2021-11-24 | A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a… |
CVE-2021-22952 | High | 8.8 | 2021-09-23 | A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently contro… |
CVE-2021-22944 | High | 8.0 | 2021-08-31 | A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privi… |
CVE-2021-22943 | Critical | 9.6 | 2021-08-31 | A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently con… |
CVE-2021-33820 | High | 7.5 | 2021-06-18 | An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resour… |
CVE-2021-33818 | High | 7.5 | 2021-06-18 | An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which coul… |
CVE-2021-22909 | High | 7.5 | 2021-05-27 | A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware upd… |
CVE-2020-24755 | High | 7.8 | 2021-05-17 | In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modif… |
CVE-2021-22882 | High | 7.5 | 2021-02-23 | UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to cra… |
CVE-2020-8282 | High | 8.8 | 2020-12-14 | A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform… |
CVE-2020-8267 | Medium | 5.3 | 2020-11-05 | A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improper… |
CVE-2020-27888 | High | 7.5 | 2020-10-27 | An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased fro… |
CVE-2020-8234 | Critical | 9.8 | 2020-08-21 | A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling th… |
CVE-2020-8233 | High | 8.8 | 2020-08-17 | A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over t… |
CVE-2020-8232 | Medium | 6.5 | 2020-08-17 | An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through… |
CVE-2020-8213 | Medium | 5.3 | 2020-07-30 | An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the Un… |
CVE-2020-8188 | High | 8.8 | 2020-07-02 | We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectivel… |
CVE-2020-12695 | High | 7.5 | 2020-06-08 | The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a differe… |
CVE-2020-8171 | Critical | 9.8 | 2020-05-26 | We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prio… |
CVE-2020-8170 | Medium | 6.1 | 2020-05-26 | We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prio… |
CVE-2020-8168 | High | 8.8 | 2020-05-26 | We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prio… |
CVE-2020-8157 | Medium | 6.8 | 2020-05-02 | UniFi Cloud Key firmware <= v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial… |
CVE-2020-8148 | Medium | 5.3 | 2020-04-13 | UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. T… |
CVE-2020-8146 | High | 7.8 | 2020-04-01 | In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. T… |
CVE-2020-8145 | Medium | 6.5 | 2020-04-01 | The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privile… |
CVE-2020-8144 | High | 8.4 | 2020-04-01 | The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, does not validate fi… |
CVE-2014-2225 | High | 8.8 | 2020-02-08 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authenticati… |
CVE-2020-8126 | High | 7.8 | 2020-02-07 | A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allow… |
CVE-2019-15595 | High | 8.8 | 2019-11-26 | A privilege escalation exists in UniFi Video Controller =<3.10.6 that would allow an attacker on the local machine to run arbitrary commands. |
CVE-2019-16889 | High | 7.5 | 2019-09-25 | Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container… |
CVE-2019-5456 | High | 8.1 | 2019-07-30 | SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record th… |
CVE-2019-5446 | High | 7.2 | 2019-07-10 | Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root. |
CVE-2019-5445 | Medium | 4.9 | 2019-07-10 | DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands. |