Advisories · Technology

Ubiquiti Inc UniFi Network Application.

Every CVE that names Ubiquiti Inc UniFi Network Application among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77541 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Broken access control
Not analysed yet 26 Aug 2026
CVE-2026-77535 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper input validation in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- CWE-20
Not analysed yet 26 Aug 2026
CVE-2026-56842 CVE record

CVSS 7.5 High

Incorrect authorization in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Broken access control
Not analysed yet 2 Jul 2026
CVE-2026-55114 CVE record

CVSS 8.8 High

Improper access control in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Broken access control
Not analysed yet 2 Jul 2026
CVE-2026-55118 CVE record

CVSS 8.3 High

Improper access control in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Broken access control
Not analysed yet 2 Jul 2026
CVE-2026-54406 CVE record

CVSS 8.7 High

Path traversal in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Path traversal
Not analysed yet 2 Jul 2026
CVE-2026-54405 CVE record

CVSS 7.5 High

Improper input validation in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- CWE-20
Not analysed yet 2 Jul 2026
CVE-2026-22557 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Path traversal in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Path traversal
Not analysed yet 19 Mar 2026
CVE-2026-22558 CVE record

CVSS 7.7 High

Ubiquiti Inc UniFi Network Application: An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could…
- Ubiquiti Inc UniFi Network Application
- Other injection
Not analysed yet 19 Mar 2026
CVE-2025-24292 CVE record

CVSS 6.8 Medium

Improper authentication in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Authentication bypass
Not analysed yet 29 Jun 2025
CVE-2024-42028 CVE record

CVSS 8.8 High

Incorrect default permissions in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Broken access control
Not analysed yet 28 Oct 2024
CVE-2024-42025 CVE record

CVSS 7.8 High

Command injection in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Command injection
Not analysed yet 13 Sept 2024
CVE-2024-27981 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Command injection in Ubiquiti Inc UniFi Network Application
- Ubiquiti Inc UniFi Network Application
- Command injection
Not analysed yet 4 Apr 2024
CVE-2023-28365 CVE record

A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host dev…
- Ubiquiti Inc. UniFi Network application
Not analysed yet 30 Jun 2023