Ubiquiti Inc Unifi Access Application vulnerabilities
8 vulnerabilities
Known vulnerabilities in Ubiquiti Inc Unifi Access Application, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-52665ubiquiti incunifi access application+1
EPSS score41.09%
A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later.
Affected Products:
UniFi Access Application (Version 3.3.22 through 3.4.31).
Mitigation:
Update your UniFi Access Application to Version 4.0.21 or later.CVE-2026-54400ubiquiti incunifi access application+1EPSS score0.52%
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.CVE-2026-77547ubiquiti incunifi access applicationEPSS score1.44%
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.CVE-2026-77553ubiquiti incunifi access applicationEPSS score0.47%
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.CVE-2026-77546ubiquiti incunifi access applicationEPSS score1.44%
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.CVE-2026-77543ubiquiti incunifi access applicationEPSS score1.44%
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.CVE-2026-55117ubiquiti incunifi access application+1EPSS score0.56%
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.CVE-2026-50748ubiquiti incunifi access application+1EPSS score1.63%
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.