Ubiquiti UniFi security vulnerabilities
Networking / NAS. Public CVE monitoring for Ubiquiti UniFi. Vendor security advisories are linked on this page.
Built for Operators of this product.
39 public records · 0 security-fix timeline events. 0 published in the last 7 days. 21 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 2
- Medium 2
- Low 2
2026-08-066 issues2026-11-03
Known exploited
View all known exploited- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityPatch nowKEVEPSS 90.03%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityPatch nowKEVEPSS 88.29%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityPatch nowKEVEPSS 68.03%May 21, 2026
- Critical10.0ui unifi_access Missing Authentication for Critical FunctionPatch nowKEVEPSS 41.09%Oct 30, 2025
Recently published
Browse catalog- Medium5.3A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.Check if you run itEPSS 0.25%Oct 14, 2026
- Critical9.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.Check if you run itEPSS 1.25%May 22, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityPatch nowKEVEPSS 90.03%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityPatch nowKEVEPSS 68.03%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityPatch nowKEVEPSS 88.29%May 21, 2026
- High7.5An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.Check if you run itEPSS 0.36%Apr 13, 2026
- High7.5An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.Check if you run itEPSS 0.43%Apr 13, 2026
- Critical9.8An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.Check if you run itEPSS 0.42%Apr 13, 2026
- Critical9.8A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network.Check if you run itEPSS 1.05%Apr 13, 2026
- High7.7An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.Check if you run itEPSS 0.56%Mar 19, 2026