Search Results (58 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-77551 1 Ubiquiti 1 Unifi Connect Display Cast Pro 2026-08-28 9 Critical
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device.
CVE-2026-77552 1 Ubiquiti 1 Unifi Enterprise Audio/video Bridge 2026-08-28 9.8 Critical
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.
CVE-2026-77557 1 Ubiquiti 1 Unifi Protect Ai Key 2026-08-28 9.8 Critical
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.
CVE-2026-77532 1 Ubiquiti 1 Edgemax Edgeswitch 2026-08-28 9.6 Critical
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.
CVE-2026-77554 1 Ubiquiti 1 Unifi Talk Application 2026-08-26 10 Critical
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.
CVE-2026-77540 1 Ubiquiti 1 Unifi Os Server 2026-08-26 9.1 Critical
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
CVE-2026-77542 1 Ubiquiti 1 Uid Enterprise Agent 2026-08-26 9.1 Critical
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.
CVE-2026-77535 1 Ubiquiti 1 Unifi Network Application 2026-08-26 9.1 Critical
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device.
CVE-2026-77539 1 Ubiquiti 1 Unifi Os Server 2026-08-26 9.1 Critical
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
CVE-2026-34908 2 Ubiquiti, Ui 92 Efg, Envr, Envr-core and 89 more 2026-08-12 10 Critical
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
CVE-2026-34909 2 Ubiquiti, Ui 94 Efg, Envr, Envr-core and 91 more 2026-08-11 10 Critical
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
CVE-2026-21639 2 Ubiquiti, Ui 12 Airfiber Af60, Airfiber Af60 Xg, Airmax Ac and 9 more 2026-08-04 8.8 High
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.
CVE-2026-22557 1 Ubiquiti 1 Unifi Network Application 2026-08-04 10 Critical
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
CVE-2026-34910 2 Ubiquiti, Ui 92 Efg, Envr, Envr-core and 89 more 2026-08-04 10 Critical
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVE-2026-55118 2 Ubiquiti, Ui 2 Unifi Network Application, Unifi Network Application 2026-08-03 8.3 High
A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.
CVE-2026-55119 2 Ubiquiti, Ui 2 Unifi Talk Application, Unifi Talk Application 2026-08-03 8.1 High
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.
CVE-2026-56842 2 Ubiquiti, Ui 2 Unifi Network Application, Unifi Network Application 2026-08-01 7.5 High
A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.
CVE-2026-54405 2 Ubiquiti, Ui 2 Unifi Network Application, Unifi Network Application 2026-07-31 7.5 High
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.
CVE-2026-55111 2 Ubiquiti, Ui 3 Unifi Protect Floodlight, Protect Floodlight, Protect Floodlight Firmware 2026-07-31 7.5 High
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.
CVE-2026-55114 2 Ubiquiti, Ui 2 Unifi Network Application, Unifi Network Application 2026-07-31 8.8 High
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.