Low · 3.4 CVE-2025-48979 EUVD-2025-28276GHSA-ff3c-4mv4-5786

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.

Published Aug 28, 2025 · Updated Aug 29, 2025 · Assigned by hackerone

Description

Vendor	Product	Affected	Fixed
Ubiquiti	UISP Application	2.4.220 – < 2.4.220	2.4.220