UP
Product
UniFi Protect Application
12
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 4Medium 2Low 0
Watch
Add UniFi Protect Application to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77537 | 10.0 | Aug 26 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host… Affected: before 7.2.105 |
| CVE-2026-77548 | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command… Affected: before 7.2.105 |
| CVE-2026-77533 | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command… Affected: before 7.2.105 |
| CVE-2026-55115 | 9.9 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host… Affected: before 7.1.83 |
| CVE-2026-54408 | 9.8 | Jul 2 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming Affected: before 7.1.83 |
| CVE-2025-23116 | 9.6 | Mar 1 | An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras… Affected: 5.2.49 before 5.2.49 |
| CVE-2026-56841 | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate… Affected: before 7.1.83 |
| CVE-2026-21633 | 8.8 | Jan 5 | A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi… Affected: 6.1.79 before 6.2.72 |
| CVE-2026-54407 | 8.6 | Jul 2 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi… Affected: before 7.1.83 |
| CVE-2026-54409 | 8.1 | Jul 2 | A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass… Affected: before 7.1.83 |
| CVE-2026-21634 | 6.5 | Jan 5 | A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart Affected: 6.1.79 before 6.2.72 |
| CVE-2025-23164 | 4.4 | May 19 | A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to… Affected: 5.3.45 before 5.3.45 |
Showing 12