UN
Product
UniFi Network Application
10
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add UniFi Network Application to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22557 | 10.0 | Mar 19 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that… Affected: 10.1.89 before 10.1.89; 10.2.97 before 10.2.97; 9.0.118 before 9.0.118 |
| CVE-2026-77541 | 9.1 | Aug 26 | A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges… Affected: before 10.5.67 |
| CVE-2026-77535 | 9.1 | Aug 26 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command… Affected: before 10.5.67 |
| CVE-2026-55114 | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges… Affected: before 10.4.57 |
| CVE-2026-54406 | 8.7 | Jul 2 | A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to… Affected: before 10.4.57 |
| CVE-2026-55118 | 8.3 | Jul 2 | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application… Affected: before 10.4.57 |
| CVE-2026-22558 | 7.7 | Mar 19 | An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges Affected: 10.1.89 before 10.1.89; 10.2.97 before 10.2.97; 9.0.118 before 9.0.118 |
| CVE-2026-56842 | 7.5 | Jul 2 | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist… Affected: before 10.4.57 |
| CVE-2026-54405 | 7.5 | Jul 2 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS)… Affected: before 10.4.57 |
| CVE-2025-24292 | 6.8 | Jun 29 | A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a device’s MAC address… Affected: 9.2.87 before 9.2.87 |
Showing 10