High · 8.8 CVE-2025-27216 EUVD-2025-25441GHSA-5wvh-rjrr-cgr4

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to …

Published Aug 21, 2025 · Updated Aug 21, 2025 · Assigned by hackerone

Vendor: Ubiquiti Product: UISP Application Category: Network devices

Description

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges.

Affected products

Vendor	Product	Affected	Fixed
Ubiquiti	UISP Application	2.4.220 – < 2.4.220	2.4.220

References

https://community.ui.com/releases/Security-Advisory-Bulletin-053/b0c4aa38-90aa-412d-b5b9-6395e057d822