Vendor
Ubiquiti
151 known vulnerabilities.
Ubiquiti at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 13 | 0 |
| Sep 2026 | 6 | 0 |
| Aug 2026 | 23 | 21 |
| Jul 2026 | 25 | 7 |
| Jun 2026 | 5 | 3 |
| May 2026 | 5 | 4 |
| Apr 2026 | 5 | 3 |
| Mar 2026 | 5 | 1 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 7 | 1 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 2 | 1 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 10 | 4 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 3 | 1 |
| May 2025 | 2 | 1 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 5 | 2 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 1 | 0 |
Most common weaknesses
Products
Express 7 25
UniFi OS Server 20
Dream Machines 18
Dream Wall 18
Dream Routers 18
Cloud Gateways 18
UniFi Network Application 16
EdgeRouter X 14
Express 12
UniFi Protect Application 12
Enterprise Fortress Gateway 11
Cloud Keys 11
Network Video Recorders 11
Enterprise Firewall Core 11
Network Attached Storage 10
UDM 9
UDM-Pro 9
UDM-SE 9
UDM-Pro-Max 9
EFG 9
UDW 9
UCG-Max 9
UDM-Beast 8
UDR 8
UDR7 8
UDR-5G 8
UNVR 8
UNVR-Pro 8
UCKP 8
UCK 8
UCK-Enterprise 8
UCG-Ultra 8
UCG-Fiber 8
UCG-Industrial 8
UniFi Access Application 8
UNVR-Instant 7
UNVR-G2 7
UNVR-G2-Pro 7
ENVR 7
ENVR-Core 7
Latest advisories
-
High max 8.6
Ubiquiti UniFi Protect AI Key: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi Protect AI Key ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebige Betriebssystembefehle auszuführen, vertrauliche Informationen auszulesen, Dateien zu manipulieren oder …
first Oct 13, 2026 -
Medium max 7.5WID-SEC-2026-3511 6 CVEs
Ubiquiti UniFi Gateways: Mehrere Schwachstellen ermöglichen Denial of Service
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi Gateways ausnutzen, um einen Denial of Service Angriff durchzuführen.
-
High max 10.0NCSC-2026-0330 22 CVEs
Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti
Ubiquiti heeft kwetsbaarheden verholpen in verschillende UniFi-producten, waaronder UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enter…
-
High max 10.0
Ubiquiti UnifiOS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Ubiquiti UnifiOS ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen und um Sicherheitsvorkehrungen zu umgehen.
first Aug 25, 2026 -
High max 10.0NCSC-2026-0221 25 CVEs
Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti Networks
Ubiquiti Networks heeft kwetsbaarheden verholpen in verschillende UniFi-producten, waaronder UniFi Connect Application, UniFi Talk Application, UniFi Access Application, UniFi OS, UniFi Network Application en UniFi Protect Application.
151 results · Feed
-
Medium 6.7
A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in…
-
High 7.8
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerabi…
-
High 7.5
A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found …
-
High 7.1
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)…
-
High 8.8
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)…
-
High 8.8
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in…
-
High 8.8
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Sc…
-
High 8.6
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
Low 3.7
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability …
-
Low 3.7
A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability …
-
Medium 5.3
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vuln…
-
High 8.1
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vu…
-
Medium 5.3
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi …
-
High 7.5
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain Uni…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi g…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi g…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi …
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi …
-
High 8.8
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-en…
-
Critical 9.8
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
Critical 10.0
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Ta…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
Critical 9.8
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi En…
-
Critical 9.0
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vuln…
-
Critical 10.0
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability f…
-
Critical 9.0
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of C…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.0
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerabilit…
-
Critical 9.1CVE-2026-77542 Public exploit
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
High 8.2
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Conn…
-
Critical 10.0
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Pr…
-
Critical 9.9
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
Critical 9.1
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…