Ubiquiti UniFi vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
39 matching records
- High8.6A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthori…Check if you run itEPSS 0.26%Oct 14, 2026
- Low3.7A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or trunc…Check if you run itEPSS 0.26%Oct 14, 2026
- Low3.7A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain informat…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium5.3A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to acces…Check if you run itEPSS 0.26%Oct 14, 2026
- High8.1A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to exe…Check if you run itEPSS 1.21%Oct 14, 2026
- Medium5.3A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.Check if you run itEPSS 0.25%Oct 14, 2026
- High7.7A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlyin…Check if you run itEPSS 0.68%May 22, 2026
- Critical9.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.Check if you run itEPSS 1.25%May 22, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityPatch nowKEVEPSS 90.03%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityPatch nowKEVEPSS 68.03%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityPatch nowKEVEPSS 88.29%May 21, 2026
- High7.5An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.Check if you run itEPSS 0.36%Apr 13, 2026
- High7.5An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.Check if you run itEPSS 0.43%Apr 13, 2026
- Critical9.8An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.Check if you run itEPSS 0.42%Apr 13, 2026
- Critical9.8A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network.Check if you run itEPSS 1.05%Apr 13, 2026
- Critical9.8A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that cou…Check if you run itEPSS 0.77%Apr 13, 2026
- High7.7UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network atta…Check if you run itEPSS 0.12%Mar 27, 2026
- Critical9.0Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to…Check if you run itEPSS 0.08%Mar 27, 2026
- High8.8An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clickin…Check if you run itEPSS 0.37%Mar 24, 2026
- High7.7An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.Check if you run itEPSS 0.56%Mar 19, 2026
- Critical10.0A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying syst…Check this weekEPSS 28.12%Mar 19, 2026
- High8.8A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affectedCheck if you run itEPSS 0.43%Jan 8, 2026
- Medium5.3An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted vCheck if you run itEPSS 0.15%Jan 5, 2026
- Medium6.5A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart.Check if you run itEPSS 0.43%Jan 5, 2026
- High8.8A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi ProteCheck if you run itEPSS 0.46%Jan 5, 2026