Advisories · Technology

Ubiquiti Inc UISP Application.

Every CVE that names Ubiquiti Inc UISP Application among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48979 CVE record

CVSS 3.4 Low

Command injection in Ubiquiti Inc UISP Application
- Ubiquiti Inc UISP Application
- Command injection
Not analysed yet 28 Aug 2025
CVE-2025-27216 CVE record

CVSS 8.8 High

Incorrect permission assignment in Ubiquiti Inc UISP Application
- Ubiquiti Inc UISP Application
- Broken access control
Not analysed yet 21 Aug 2025
CVE-2025-27217 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Server-side request forgery in Ubiquiti Inc UISP Application
- Ubiquiti Inc UISP Application
- Server-side request forgery (SSRF)
Not analysed yet 21 Aug 2025
CVE-2025-24290 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

SQL injection in Ubiquiti Inc UISP Application
- Ubiquiti Inc UISP Application
- SQL injection
Not analysed yet 29 Jun 2025