Summary
Ein Angreifer kann mehrere Schwachstellen in Ubiquiti UnifiOS ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen und um Sicherheitsvorkehrungen zu umgehen.
Product
UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.
Vulnerabilities 22
-
Critical 10.0
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Pr…
-
Critical 10.0
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability f…
-
Critical 10.0
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Ta…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
Critical 9.8
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi En…
-
Critical 9.8
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability…
-
Critical 9.1CVE-2026-77542 Public exploit
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
Critical 9.0
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug…
-
Critical 9.0
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of C…
-
Critical 9.0
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vuln…
-
High 8.2
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Conn…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-66393, EUVD-2026-66392, EUVD-2026-66391, EUVD-2026-66390, EUVD-2026-66400, EUVD-2026-66399, EUVD-2026-66398, EUVD-2026-66401, EUVD-2026-66402, EUVD-2026-66403, EUVD-2026-66404, EUVD-2026-66382, EUVD-2026-66378, EUVD-2026-66384, EUVD-2026-66368, EUVD-2026-66383, EUVD-2026-66367, EUVD-2026-66366, EUVD-2026-66365, EUVD-2026-66364, EUVD-2026-66363, EUVD-2026-66360
-
#1
Initiale Fassung
References
-
Ubiquiti Security Advisory Bulletin 067 vom 2026-08-25
https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9