Ubiquiti vulnerabilities
We track 119 vulnerabilities in Ubiquiti products across 60+ products. 119 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on October 29, 2026.
Latest Ubiquiti vulnerabilities
- 8.3 High severity
UniFi Network Application: Improper Access Control
A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.
- 8.6 High severity
UniFi Access Application: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.
- 9.8 Critical severity
Dream Machines: Improper Access Control
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
- 9.9 Critical severity
UniFi Protect Application: Server-Side Request Forgery
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.
- 8.8 High severity
UniFi Network Application: Improper Access Control
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.
- 7.5 High severity
UniFi Talk Application: Server-Side Request Forgery
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.
- 8.8 High severity
Dream Machines: Improper Access Control
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
- 7.5 High severity
UniFi Protect Floodlight: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.
- 8.1 High severity
UniFi Protect Application: Improper Initialization
A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras.
- 9.8 Critical severity
UniFi Protect Application: Improper Access Control
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.
- 8.6 High severity
UniFi Protect Application: Improper Access Control
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.
- 8.7 High severity
UniFi Network Application: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device.
- 7.5 High severity
A malicious actor with access to the network could exploit an Improper Input Validation…
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.
- 8.8 High severity
UniFi OS Server: Improper Neutralization of Special Elements used in an SQL Command
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
- 8.6 High severity
UniFi OS Server: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.
- 8.8 High severity
UniFi OS Server: Improper Neutralization of Special Elements used in a Command
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.
- 8.8 High severity
UniFi OS Server: Server-Side Request Forgery
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
- 9.1 Critical severity
UniFi Access Application: Improper Access Control
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
- 9.9 Critical severity
A malicious actor with access to the network and low privileges could exploit an Improper…
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
- 9.9 Critical severity
UniFi Talk Application: Improper Neutralization of Special Elements used in an SQL Command
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.
- 10.0 Critical severity
UniFi Connect Application: Improper Access Control
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.
- 8.1 High severity
UDM: Improper Access Control
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
- 9.9 Critical severity
A malicious actor with access to the network and low privileges could exploit an Improper…
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.
- 9.9 Critical severity
A malicious actor with access to the network and low privileges could exploit an Improper…
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
- 8.6 High severity
UniFi OS Server: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
- 9.9 Critical severity
A malicious actor with access to the network and low privileges could exploit an Improper…
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.
- 7.7 High severity
UniFi OS Server: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
- 10.0 Critical severity
Ubiquiti UniFi OS Improper Input Validation Exploited
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
- 10.0 Critical severity
Ubiquiti UniFi OS Path Traversal Exploited
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
- 10.0 Critical severity
Ubiquiti UniFi OS Improper Access Control Exploited
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
- 9.1 Critical severity
A malicious actor with access to the network and high privileges could exploit an Improper…
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
- 7.5 High severity
UniFi Play PowerAmp: Improper Access Control
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials. Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and ea
- 7.5 High severity
An Improper Input Validation vulnerability could allow a malicious actor with access to the…
An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding. Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and
- 9.8 Critical severity
UniFi Play PowerAmp: Improper Access Control
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system. Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Ve
- 9.8 Critical severity
A series of Improper Input Validation vulnerabilities could allow a Command Injection by a…
A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and earl
- 9.8 Critical severity
UniFi Play PowerAmp: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution (RCE). Affected Products: UniFi Play PowerAmp (Version
- 8.8 High severity
An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized…
An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affected Products: UniFi Network Server (Version 10.1.85 and earlier) Mit
- 7.7 High severity
UniFi Network Application: Improper Neutralization of Special Elements in Data Query Logic
An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.
- 10.0 Critical severity
UniFi Network Application: Improper Limitation of a Pathname to a Restricted Directory
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
- 8.8 High severity
airMAX AC: Buffer Copy without Checking Size of Input
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.