Summary
Ein Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um seine Privilegien zu erhöhen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, und um Informationen offenzulegen.
Product
UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.
Vulnerabilities 25
-
Critical 10.0CVE-2026-50746 Public exploit
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Conn…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection v…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in U…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability…
-
Critical 9.0
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access …
-
High 8.8
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection v…
-
High 8.8
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
High 8.8
A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerabil…
-
High 8.7
A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in …
-
High 8.6
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices runn…
-
High 8.6
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
High 8.6
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
High 8.6
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Applica…
-
High 8.3
A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Acce…
-
High 8.1
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
High 7.7
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to e…
-
High 7.5
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Ne…
-
High 7.5
A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vuln…
-
High 7.5
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CO…
-
High 7.5
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodl…
-
High 7.5
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper …
-
High 7.5
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in …
-
High 7.5
A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vuln…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-41401, EUVD-2026-41403, EUVD-2026-41402, EUVD-2026-41394, EUVD-2026-41395, EUVD-2026-41396, EUVD-2026-41397, EUVD-2026-41398, EUVD-2026-41399, EUVD-2026-41390, EUVD-2026-41391, EUVD-2026-41392, EUVD-2026-41393, EUVD-2026-41379, EUVD-2026-41380, EUVD-2026-41381, EUVD-2026-41382, EUVD-2026-41384, EUVD-2026-41385, EUVD-2026-41386, EUVD-2026-41388, EUVD-2026-41387, EUVD-2026-41389, EUVD-2026-41400, EUVD-2026-41383
-
#1
Initiale Fassung
References
-
Security Advisory Bulletin vom 2026-07-01
https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc