Ubiquiti UniFi vulnerabilities

Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.

6 matching records

Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityVuln · CVE-2026-34910 · ui · unifi os server · CISA KEV · CVE.org · FIRST EPSS · UbiquitiPatch nowKEVEPSS 90.03%May 21, 2026
Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityVuln · CVE-2026-34909 · ui · unifi os server · CISA KEV · CVE.org · FIRST EPSS · UbiquitiPatch nowKEVEPSS 68.03%May 21, 2026
Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityVuln · CVE-2026-34908 · ui · unifi os server · CISA KEV · CVE.org · FIRST EPSS · UbiquitiPatch nowKEVEPSS 88.29%May 21, 2026
Critical10.0ui unifi_access Missing Authentication for Critical FunctionVuln · CVE-2025-52665 · Ubiquiti Inc · UniFi Access Application · CVE.org · FIRST EPSS · EUVD · UbiquitiPatch nowKEVEPSS 41.09%Oct 30, 2025
Unknownui unifi_network_application Improper Neutralization of Special Elements used in a Command ('Command Injection')Vuln · CVE-2023-28365 · ui · unifi_network_application · CVE.org · FIRST EPSS · VulnCheck KEV · UbiquitiPatch nowKEVEPSS 0.88%Sep 18, 2024
Critical9.8Ubiquiti AirOS Command Injection VulnerabilityVuln · CVE-2010-5330 · Ubiquiti · AirOS · CISA KEV · CVE.org · FIRST EPSS · UbiquitiPatch nowKEVEPSS 40.23%Jun 11, 2019

Sort