UISP Application vulnerabilities

3 known vulnerabilities in UISP Application from Ubiquiti. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  UISP Application: Server-Side Request Forgery

  CVE-2025-27217Aug 21, 2025Ubiquiti

  A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.

• 8.8 High severity

  UISP Application: Incorrect Permission Assignment for Critical Resource

  CVE-2025-27216Aug 21, 2025Ubiquiti

  Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges.

• 9.9 Critical severity

  UISP Application: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-24290Jun 29, 2025Ubiquiti

  Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges.