Ui vulnerabilities
118 vulnerabilities
Known vulnerabilities in Ui products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 115 products.
Products
50 of 115- Unifi Protect13 vulnerabilities
- Unifi Dream Machine Pro11 vulnerabilities
- Enterprise Network Video Recorder10 vulnerabilities
- Enterprise Network Video Recorder Core10 vulnerabilities
- Unifi Cloud Gateway Fiber10 vulnerabilities
- Unifi Cloud Gateway Industrial10 vulnerabilities
- Unifi Cloud Gateway Max10 vulnerabilities
- Unifi Cloudkey10 vulnerabilities
- Unifi Dream Machine Beast10 vulnerabilities
- Unifi Dream Machine Pro Max10 vulnerabilities
- Unifi Dream Machine Special Edition10 vulnerabilities
- Unifi Dream Router10 vulnerabilities
- Unifi Dream Router 710 vulnerabilities
- Unifi Dream Wall10 vulnerabilities
- Unifi Network Video Recorder10 vulnerabilities
- Unifi Network Video Recorder G210 vulnerabilities
- Unifi Network Video Recorder G2 Pro10 vulnerabilities
- Unifi Network Video Recorder Instant10 vulnerabilities
- Unifi Network Video Recorder Pro10 vulnerabilities
- Unifi Os Server10 vulnerabilities
- Enterprise Fortress Gateway9 vulnerabilities
- Unas 29 vulnerabilities
- Unas 49 vulnerabilities
- Unas Pro9 vulnerabilities
- Unas Pro 49 vulnerabilities
- Unas Pro 89 vulnerabilities
- Unifi Cloud Gateway Ultra9 vulnerabilities
- Unifi Cloud Key Plus9 vulnerabilities
- Unifi Cloudkey Enterprise9 vulnerabilities
- Unifi Dream Router 5G Max9 vulnerabilities
- Unifi Express 79 vulnerabilities
- Unifi Network Application9 vulnerabilities
- Er X8 vulnerabilities
- Er X Sfp8 vulnerabilities
- Unifi Dream Machine8 vulnerabilities
- Unifi Video7 vulnerabilities
- Edgeswitch6 vulnerabilities
- Unifi Controller6 vulnerabilities
- Airos5 vulnerabilities
- Enterprise Firewall Core5 vulnerabilities
- Desktop4 vulnerabilities
- Edgemax Edgerouter4 vulnerabilities
- Unifi Access4 vulnerabilities
- Airmax Ac3 vulnerabilities
- Edgerouter X3 vulnerabilities
- Edgeswitch X3 vulnerabilities
- Unifi Switch3 vulnerabilities
- Unifi Talk Application3 vulnerabilities
- Aircam2 vulnerabilities
- Camera G3 Flex2 vulnerabilities
CVE-2018-5264uiunifi_firmware
EPSS score1.49%
Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free time" Wi-Fi usage by sending a /guest/s/default/ request to obtain a cookie, and then using this cookie in a /guest/s/default/login request with the byfree parameter.CVE-2018-5265uiedgeosEPSS score2.93%
Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters.CVE-2018-12590uiedgeswitch_firmwareEPSS score1.67%
Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an admin account could escape the restricted CLI and execute arbitrary code.CVE-2013-1606uiaircam_firmware+3EPSS score23.40%
Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.CVE-2013-3572uiunifi_controllerEPSS score1.65%
Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname.CVE-2021-22882uiunifi_protect_controllerEPSS score1.32%
UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash.CVE-2021-22909uiedgemax_edgerouter_firmwareEPSS score1.29%
A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in EdgeMAX EdgeRouter V2.0.9-hotfix.1 and later.CVE-2021-22943uiunifi_protectEPSS score0.41%
A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.CVE-2021-22944uiunifi_protectEPSS score0.42%
A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.CVE-2021-22957uiunifi_protectEPSS score0.91%
A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect application Version 1.20.0 and later.CVE-2021-22952uiunifi_talkEPSS score1.02%
A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network if they are not yet adopted. This vulnerability is fixed in UniFi Talk application V1.12.5 and later.CVE-2021-44527uiunifi_switch_firmwareEPSS score0.38%
A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later.CVE-2021-44530uiunifi_network_controllerEPSS score1.09%
An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to control the application.CVE-2021-33818uicamera_g3_flex_firmwareEPSS score1.93%
An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.CVE-2021-33820uicamera_g3_flex_firmwareEPSS score1.93%
An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service.CVE-2015-9266ubntairos_4_xs2+11EPSS score74.00%
The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This vulnerability is fixed in the following product versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5.6.2 XM/XW/TI, 5.5.11 XM/TI, and 5.5.10u2 XW; airGateway 1.1.5; airFiber AF24/AF24HD 2.2.1, AF5x 3.0.2.1, and AF5 2.2.1; airOS 4 XS2/XS5 4.0.4; and EdgeSwitch XP (formerly TOUGHSwitch) 1.3.2.CVE-2016-6914uiunifi_videoEPSS score1.16%
Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.CVE-2025-52665ubiquiti incunifi access application+1EPSS score41.09%
A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later.
Affected Products:
UniFi Access Application (Version 3.3.22 through 3.4.31).
Mitigation:
Update your UniFi Access Application to Version 4.0.21 or later.CVE-2025-59467ubiquiti incucrm argentina afip invoices plugin+1EPSS score0.26%
A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and earlier) could allow privilege escalation if an Administrator is tricked into visiting a crafted malicious page.
This plugin is disabled by default.
Affected Products:
UCRM Argentina AFIP invoices Plugin (Version 1.2.0 and earlier)
Mitigation:
Update UCRM Argentina AFIP invoices Plugin to Version 1.3.0 or later.CVE-2020-27888uiunifi_controller+1EPSS score1.01%
An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point returning wirelessly from a disconnected state. This may provide unintended network access.