Ubiquiti Inc Unifi Protect Application vulnerabilities
12 vulnerabilities
Known vulnerabilities in Ubiquiti Inc Unifi Protect Application, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-23164ubiquiti incunifi protect application
EPSS score0.35%
A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled.CVE-2025-23116ubiquiti incunifi protect applicationEPSS score0.51%
An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras.CVE-2026-21634ubiquiti incunifi protect application+1EPSS score0.43%
A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart.
Affected Products:
UniFi Protect Application (Version 6.1.79 and earlier).
Mitigation:
Update your UniFi Protect Application to Version 6.2.72 or later.CVE-2026-21633ubiquiti incunifi protect application+1EPSS score0.46%
A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).
Affected Products:
UniFi Protect Application (Version 6.1.79 and earlier).
Mitigation:
Update your UniFi Protect Application to Version 6.2.72 or later.CVE-2026-54407ubiquiti incunifi protect application+1EPSS score0.45%
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.CVE-2026-54409ubiquiti incunifi protect application+1EPSS score0.44%
A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras.CVE-2026-54408ubiquiti incunifi protect application+1EPSS score0.57%
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.CVE-2026-77533ubiquiti incunifi protect applicationEPSS score1.44%
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.CVE-2026-77548ubiquiti incunifi protect applicationEPSS score1.44%
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.CVE-2026-77537ubiquiti incunifi protect applicationEPSS score1.64%
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.CVE-2026-55115ubiquiti incunifi protect application+1EPSS score0.47%
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.CVE-2026-56841ubiquiti incunifi protect application+1EPSS score0.49%
A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.