Skip to content
OpenAdvisories
High · 7.7 CVE-2026-22558 EUVD-2026-13104GHSA-86qf-w767-gpvp

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access t…

Published Mar 19, 2026 · Updated Mar 19, 2026 · Assigned by hackerone

Vendor: Ubiquiti Product: UniFi Network Application Category: Network devices

Description

An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi Network Application 10.1.89 – < 10.1.89, 10.2.97 – < 10.2.97, 9.0.118 – < 9.0.118 10.1.89

Advisories 1

References