Ubiquiti Inc vulnerabilities
117 vulnerabilities
Known vulnerabilities in Ubiquiti Inc products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 97 products.
Products
50 of 97- Express 725 vulnerabilities
- Unifi OS Server20 vulnerabilities
- Cloud Gateways18 vulnerabilities
- Dream Machines18 vulnerabilities
- Dream Routers18 vulnerabilities
- Dream Wall18 vulnerabilities
- Unifi Network Application14 vulnerabilities
- Express12 vulnerabilities
- Unifi Protect Application12 vulnerabilities
- Cloud Keys11 vulnerabilities
- Enterprise Firewall Core11 vulnerabilities
- Enterprise Fortress Gateway11 vulnerabilities
- Network Video Recorders11 vulnerabilities
- Network Attached Storage10 vulnerabilities
- EFG9 vulnerabilities
- UCG Max9 vulnerabilities
- UDM9 vulnerabilities
- UDM Pro9 vulnerabilities
- UDM Pro Max9 vulnerabilities
- UDM SE9 vulnerabilities
- UDW9 vulnerabilities
- UCG Fiber8 vulnerabilities
- UCG Industrial8 vulnerabilities
- UCG Ultra8 vulnerabilities
- UCK8 vulnerabilities
- UCK Enterprise8 vulnerabilities
- UCKP8 vulnerabilities
- UDM Beast8 vulnerabilities
- UDR8 vulnerabilities
- UDR 5G8 vulnerabilities
- UDR78 vulnerabilities
- Unifi Access Application8 vulnerabilities
- UNVR8 vulnerabilities
- ENVR7 vulnerabilities
- ENVR Core7 vulnerabilities
- UNAS 27 vulnerabilities
- UNAS 47 vulnerabilities
- UNAS Pro7 vulnerabilities
- UNAS Pro 47 vulnerabilities
- UNAS Pro 87 vulnerabilities
- Unifi Protect AI Key7 vulnerabilities
- UNVR G27 vulnerabilities
- UNVR G2 Pro7 vulnerabilities
- UNVR Instant7 vulnerabilities
- UNVR Pro7 vulnerabilities
- Enterprise Firewalls6 vulnerabilities
- Enterprise Video Recorders6 vulnerabilities
- Unifi Gateways6 vulnerabilities
- Enterprise Network Attached Storage5 vulnerabilities
- Enterprise Network Video Recorders5 vulnerabilities
CVE-2026-110454ubiquiti incunifi protect ai key
EPSS score0.25%
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.CVE-2026-110456ubiquiti incunifi protect ai keyEPSS score0.26%
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.CVE-2026-110455ubiquiti incunifi protect ai keyEPSS score1.21%
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.CVE-2026-110459ubiquiti incunifi protect ai keyEPSS score0.26%
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.CVE-2026-110458ubiquiti incunifi protect ai keyEPSS score0.26%
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device.CVE-2026-110457ubiquiti incunifi protect ai keyEPSS score0.27%
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.CVE-2025-52665ubiquiti incunifi access application+1EPSS score41.09%
A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later.
Affected Products:
UniFi Access Application (Version 3.3.22 through 3.4.31).
Mitigation:
Update your UniFi Access Application to Version 4.0.21 or later.CVE-2025-59467ubiquiti incucrm argentina afip invoices plugin+1EPSS score0.26%
A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and earlier) could allow privilege escalation if an Administrator is tricked into visiting a crafted malicious page.
This plugin is disabled by default.
Affected Products:
UCRM Argentina AFIP invoices Plugin (Version 1.2.0 and earlier)
Mitigation:
Update UCRM Argentina AFIP invoices Plugin to Version 1.3.0 or later.CVE-2025-48979ubiquiti incuisp applicationEPSS score0.43%
An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.CVE-2025-48978ubiquiti incedgemax edgeswitchEPSS score0.67%
An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.11.0 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.
Affected Products:
EdgeMAX EdgeSwitch (Version 1.11.0 and earlier)
Mitigation:
Update the EdgeMAX EdgeSwitch to Version 1.11.1 or later.CVE-2025-27213ubiquiti incunifi connect display+4EPSS score0.25%
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.
Affected Products:
UniFi Connect EV Station Pro (Version 1.5.18 and earlier)
UniFi Connect Display (Version 1.9.324 and earlier)
UniFi Connect Display Cast (Version 1.9.301 and earlier)
UniFi Connect Display Cast Pro (Version 1.0.78 and earlier)
UniFi Connect Display Cast Lite (Version 1.0.3 and earlier)
Mitigation:
Update UniFi Connect EV Station Pro to Version 1.5.27 or later
Update UniFi Connect Display to Version 1.13.6 or later
Update UniFi Connect Display Cast to Version 1.10.3 or later
Update UniFi Connect Display Cast Pro to Version 1.0.83 or later
Update UniFi Connect Display Cast Lite to Version 1.1.3 or laterCVE-2025-27214ubiquiti incunifi connect ev station proEPSS score0.40%
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset.
Affected Products:
UniFi Connect EV Station Pro (Version 1.5.18 and earlier)
Mitigation:
Update UniFi Connect EV Station Pro to Version 1.5.27 or laterCVE-2025-27215ubiquiti incunifi connect display cast+2EPSS score0.26%
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast devices to make unsupported changes to the system.
Affected Products:
UniFi Connect Display Cast (Version 1.10.3 and earlier)
UniFi Connect Display Cast Pro (Version 1.0.89 and earlier)
UniFi Connect Display Cast Lite (Version 1.0.3 and earlier)
Mitigation:
Update UniFi Connect Display Cast to Version 1.10.7 or later
Update UniFi Connect Display Cast Pro to Version 1.0.94 or later
Update UniFi Connect Display Cast Lite to Version 1.1.8 or laterCVE-2025-27212ubiquiti incunifi access g2 reader pro+5EPSS score1.21%
An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network.
Affected Products:
UniFi Access Reader Pro (Version 2.14.21 and earlier)
UniFi Access G2 Reader Pro (Version 1.10.32 and earlier)
UniFi Access G3 Reader Pro (Version 1.10.30 and earlier)
UniFi Access Intercom (Version 1.7.28 and earlier)
UniFi Access G3 Intercom (Version 1.7.29 and earlier)
UniFi Access Intercom Viewer (Version 1.3.20 and earlier)
Mitigation:
Update UniFi Access Reader Pro Version 2.15.9 or later
Update UniFi Access G2 Reader Pro Version 1.11.23 or later
Update UniFi Access G3 Reader Pro Version 1.11.22 or later
Update UniFi Access Intercom Version 1.8.22 or later
Update UniFi Access G3 Intercom Version 1.8.22 or later
Update UniFi Access Intercom Viewer Version 1.4.39 or laterCVE-2025-27217ubiquiti incuisp applicationEPSS score0.40%
A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.CVE-2025-27216ubiquiti incuisp applicationEPSS score0.30%
Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges.CVE-2025-24289ubiquiti incucrm client signup pluginEPSS score0.17%
A Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the UCRM Client Signup Plugin (v1.3.4 and earlier) could allow privilege escalation if an Administrator is tricked into visiting a crafted malicious page. The plugin is disabled by default.CVE-2025-24290ubiquiti incuisp applicationEPSS score0.35%
Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges.CVE-2025-24285ubiquiti incunifi connect ev station liteEPSS score1.19%
Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV Station Lite.
Affected Products:
UniFi Connect EV Station Lite (Version 1.5.1 and earlier)
Mitigation:
Update UniFi Connect EV Station Lite to Version 1.5.2 or laterCVE-2025-24292ubiquiti inc.unifi network applicationEPSS score0.35%
A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile.