UB
Vendor
Ubiquiti
51
CVEs
4
On KEV
0
New 30D
Products
UO10.0
UniFi OS
Ubiquiti
4 CVEs3 on KEV0 new
AI9.8
AirOS
Ubiquiti
1 CVEs1 on KEV0 new
EX9.8
EdgeRouter X
Ubiquiti
10 CVEs0 on KEV0 new
UN9.8
UniFi Network Application
Ubiquiti
6 CVEs0 on KEV0 new
UC7.5
Unifi Connect Display
Ubiquiti
3 CVEs0 on KEV0 new
UC7.5
Unifi Connect Display Cast
Ubiquiti
3 CVEs0 on KEV0 new
UC7.5
Unifi Connect EV Station
Ubiquiti
3 CVEs0 on KEV0 new
UC7.5
Unifi Connect EV Station Pro
Ubiquiti
3 CVEs0 on KEV0 new
UI7.1
UniFi iOS App
Ubiquiti
2 CVEs0 on KEV0 new
UN8.3
UniFi Network Controller
Ubiquiti
2 CVEs0 on KEV0 new
UU8.3
UniFi UAP Firmware
Ubiquiti
2 CVEs0 on KEV0 new
AI7.5
Aircube
Ubiquiti
1 CVEs0 on KEV0 new
AF6.6
Airmax Firmware
Ubiquiti
1 CVEs0 on KEV0 new
ED7.5
EdgeRouter
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access G2 Reader Pro
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access Intercom
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access Intercom Viewer
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access Reader Pro
Ubiquiti
1 CVEs0 on KEV0 new
UC7.5
Unifi Connect Application
Ubiquiti
1 CVEs0 on KEV0 new
UU5.3
UniFi U6+ Access Point
Ubiquiti
1 CVEs0 on KEV0 new
UU8.3
UniFi UAP-AC Firmware
Ubiquiti
1 CVEs0 on KEV0 new
UU8.3
UniFi USG Firmware
Ubiquiti
1 CVEs0 on KEV0 new
UU8.3
UniFi USW Firmware
Ubiquiti
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34910 In wildKEV | UO UniFi OS Ubiquiti | 10.0 | May 22 | Ubiquiti UniFi OS Improper Input Validation Vulnerability |
| CVE-2026-34908 In wildKEV | UO UniFi OS Ubiquiti | 10.0 | May 22 | Ubiquiti UniFi OS Improper Access Control Vulnerability |
| CVE-2026-34909 In wildKEV | UO UniFi OS Ubiquiti | 10.0 | May 22 | Ubiquiti UniFi OS Path Traversal Vulnerability |
| CVE-2019-25652 | UN UniFi Network Controller Ubiquiti | 7.5 | Mar 27 | UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM |
| CVE-2019-25651 | UN UniFi Network Controller Ubiquiti | 8.3 | Mar 27 | Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control |
| CVE-2024-45205 | UI UniFi iOS App Ubiquiti | 7.1 | Dec 4 | An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) could allow a malicious actor with access to… |
| CVE-2024-42028 | UN Unifi Network Application Ubiquiti | 8.8 | Oct 28 | A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a malicious actor with a… |
| CVE-2024-44540 | AF Airmax Firmware Ubiquiti | 6.6 | Sep 23 | Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port |
| CVE-2024-42025 | UN Unifi Network Application Ubiquiti | 7.8 | Sep 13 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with… |
| CVE-2024-37380 | UU UniFi U6+ Access Point Ubiquiti | 5.3 | Jul 22 | A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point |
| CVE-2024-34786 | UI UniFi iOS App Ubiquiti | 4.8 | Jul 9 | UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID… |
| CVE-2024-29206 | UA Unifi Access Intercom Ubiquiti | 2.2 | May 7 | An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) and make unsupported changes to the system |
| CVE-2024-29207 | UC Unifi Connect EV Station Ubiquiti | 7.5 | May 7 | An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of the system |
| CVE-2024-29208 | UC Unifi Connect Display Ubiquiti | 2.2 | May 7 | An Unverified Password Change could allow a malicious actor with API access to the device to change the system password without knowing the previous password |
| CVE-2024-27981 | UN Unifi Network Application Ubiquiti | 9.8 | Apr 4 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with… |
| CVE-2024-22054 | UU Unifi Uap Firmware Ubiquiti | 7.5 | Feb 20 | A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery |
| CVE-2023-41721 | UN UniFi Network Application Ubiquiti | 5.3 | Oct 25 | Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176 |
| CVE-2023-31998 | ED EdgeRouter Ubiquiti | 7.5 | Jul 18 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices |
| CVE-2023-32000 | UN UniFi Network Application Ubiquiti | 4.8 | Jul 7 | A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges… |
| CVE-2023-28365 | UN Unifi Network Application Ubiquiti | 9.1 | Jun 30 | A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious… |
| CVE-2023-31997 | UO Unifi OS Ubiquiti | 9.0 | Jun 30 | UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB |
| CVE-2023-2379 | EX EdgeRouter X Ubiquiti | 7.5 | Apr 28 | Ubiquiti EdgeRouter X Web Service denial of service |
| CVE-2023-2378 | EX EdgeRouter X Ubiquiti | 7.2 | Apr 28 | Ubiquiti EdgeRouter X Web Management command injection |
| CVE-2023-2377 | EX EdgeRouter X Ubiquiti | 7.2 | Apr 28 | Ubiquiti EdgeRouter X Web Management command injection |
| CVE-2023-2376 | EX EdgeRouter X Ubiquiti | 7.2 | Apr 28 | Ubiquiti EdgeRouter X Web Management command injection |
| CVE-2023-2375 | EX EdgeRouter X Ubiquiti | 7.2 | Apr 28 | Ubiquiti EdgeRouter X Web Management command injection |
| CVE-2023-2374 | EX EdgeRouter X Ubiquiti | 7.2 | Apr 28 | Ubiquiti EdgeRouter X Web Management command injection |
| CVE-2023-2373 | EX EdgeRouter X Ubiquiti | 7.2 | Apr 28 | Ubiquiti EdgeRouter X Web Management command injection |
| CVE-2023-1456 | EX EdgeRouter X Ubiquiti | 9.8 | Mar 25 | A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 |
| CVE-2023-1458 | EX EdgeRouter X Ubiquiti | 9.8 | Mar 25 | A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical |
| CVE-2023-1457 | EX EdgeRouter X Ubiquiti | 9.8 | Mar 25 | A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 |
| CVE-2010-5330 In wildKEV | AI AirOS Ubiquiti | 9.8 | Jun 11 | Ubiquiti AirOS Command Injection Vulnerability |