Skip to content
OpenAdvisories
High · 7.5 CVE-2025-48978 EUVD-2025-28275GHSA-cgfc-76rc-pxpq

An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.11.0 and earlier) could allow a Command Injection by a malicious actor with a…

Published Aug 21, 2025 · Updated Aug 21, 2025 · Assigned by hackerone

Description

An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.11.0 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.

Affected Products:

EdgeMAX EdgeSwitch (Version 1.11.0 and earlier)

Mitigation:

Update the EdgeMAX EdgeSwitch to Version 1.11.1 or later.

Affected products

VendorProductAffectedFixed
Ubiquiti EdgeMAX EdgeSwitch 1.11.1 – < 1.11.1 1.11.1

References