Vendor
Ubiquiti
151 known vulnerabilities.
Products
Express 7 25
UniFi OS Server 20
Dream Machines 18
Dream Wall 18
Dream Routers 18
Cloud Gateways 18
UniFi Network Application 16
EdgeRouter X 14
Express 12
UniFi Protect Application 12
Enterprise Fortress Gateway 11
Cloud Keys 11
Network Video Recorders 11
Enterprise Firewall Core 11
Network Attached Storage 10
UDM 9
UDM-Pro 9
UDM-SE 9
UDM-Pro-Max 9
EFG 9
UDW 9
UCG-Max 9
UDM-Beast 8
UDR 8
UDR7 8
UDR-5G 8
UNVR 8
UNVR-Pro 8
UCKP 8
UCK 8
UCK-Enterprise 8
UCG-Ultra 8
UCG-Fiber 8
UCG-Industrial 8
UniFi Access Application 8
UNVR-Instant 7
UNVR-G2 7
UNVR-G2-Pro 7
ENVR 7
ENVR-Core 7
7 results · Clear filters · Feed
-
Critical 9.1CVE-2026-77542 Public exploit
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerabili…
-
Critical 10.0CVE-2026-50746 Public exploit
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Conn…
-
Critical 10.0
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS…
KEV Jun 23, 2026 -
Critical 10.0
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS d…
KEV Jun 23, 2026 -
Critical 10.0
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Ap…
-
Critical 9.0CVE-2023-35085 Public exploit
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Mo…
-
High 7.2CVE-2023-2375 Public exploit
Ubiquiti EdgeRouter X Web Management command injection
A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the a…