By vendor

Ui vulnerabilities

Known CVEs affecting Ui products, prioritized by severity, with SEC.co remediation and detection guidance.

18 published vulnerabilities

• CVE-2026-54404HIGH 8.8

  A vulnerability in Ubiquiti UniFi OS allows attackers who already have network access and low-level user credentials to run specially crafted SQL commands that bypass normal security controls and gain administrative privileges. This affects a broad range of UniFi networking and video recording devices. An attacker would need existing credentials to exploit this—they cannot attack from outside the network or without logging in first.

• CVE-2026-55114HIGH 8.8

  CVE-2026-55114 is a privilege escalation flaw in Ubiquiti's UniFi Network Application that allows an authenticated attacker with low-level permissions to gain higher privileges within the application. An attacker already present on the network can exploit weak access controls to expand their capabilities and potentially compromise network infrastructure management.

• CVE-2026-56841HIGH 8.8

  An authenticated SQL injection vulnerability in UniFi Protect allows a user or attacker with valid network access and low-level privileges to execute arbitrary SQL commands against the application's database. By manipulating SQL queries through the application interface, an attacker can bypass security controls and gain elevated permissions on the host device running UniFi Protect. This is a post-authentication attack; the attacker must already have some form of access to the system or network.

• CVE-2026-54406HIGH 8.7

  A path traversal vulnerability in self-hosted UniFi Network Application instances allows a high-privilege network-adjacent attacker to write files on the underlying host system, potentially leading to system compromise. While the attacker must already possess elevated credentials and network access, successful exploitation can expand their control beyond the application to the host operating system itself.

• CVE-2026-54403HIGH 8.6

  A path traversal vulnerability in Ubiquiti's UniFi OS allows an attacker with network access to bypass authentication on affected UniFi devices and controllers. The flaw does not require user interaction or special privileges to exploit, meaning an attacker positioned on the same network could potentially gain unauthorized access to UniFi OS instances without valid credentials. This is a serious issue because UniFi devices are commonly used to manage enterprise and residential networks, and compromised access could lead to network reconnaissance, configuration changes, or lateral movement.

• CVE-2026-54407HIGH 8.6

  UniFi Protect Application contains an authentication bypass vulnerability that allows an attacker with network access to circumvent login controls on certain API endpoints. An unauthenticated attacker on the network can reach these endpoints and perform unauthorized actions without valid credentials, potentially affecting the confidentiality, integrity, and availability of protected systems.

• CVE-2026-54408HIGH 8.6

  CVE-2026-54408 is a network-based authentication bypass flaw in UniFi Protect that allows an attacker with network access to stream video data without providing valid credentials. The vulnerability stems from improper access control logic and carries a CVSS score of 8.6 (HIGH severity). While an attacker cannot modify system configuration or cause denial of service at scale, the ability to intercept sensitive surveillance footage represents a significant confidentiality breach for organizations relying on UniFi Protect for physical security monitoring.

• CVE-2026-55117HIGH 8.6

  A network-accessible vulnerability in UniFi Access Application allows an unauthenticated attacker to read arbitrary files from the host system through path traversal. An attacker positioned on the network can craft requests that bypass directory restrictions, potentially exposing sensitive configuration files, credentials, or application data without requiring any user interaction or prior access privileges.

• CVE-2026-55118HIGH 8.3

  CVE-2026-55118 is a privilege escalation vulnerability in Ubiquiti's UniFi Network Application. An attacker who already has network access and low-level privileges can exploit an access control flaw to gain elevated permissions within the application. The vulnerability requires the attacker to already be authenticated or have network-level presence, limiting the scope somewhat, but the impact of successful exploitation is severe—attackers could modify network settings, access sensitive data, or disrupt network operations.

• CVE-2026-55119HIGH 8.1

  A vulnerability in Ubiquiti's UniFi Talk Application allows an attacker with basic network access and low-level user privileges to gain higher privileges within the application. An attacker would need to be authenticated to the network and application first, but once in, they can escalate their access level without additional user interaction. This type of privilege escalation is particularly concerning in enterprise environments where applications manage critical communications infrastructure.

• CVE-2026-54401HIGH 7.7

  A critical privilege escalation flaw in Ubiquiti UniFi OS allows attackers who already have network access and basic user permissions to abuse the system's ability to make outbound requests (Server-Side Request Forgery) to gain higher-level administrative control. The attack requires an attacker to be inside the network or have valid low-privilege credentials, but once exploited, could grant them full system access.

• CVE-2026-54405HIGH 7.5

  A vulnerability in Ubiquiti's UniFi Network Application allows an attacker already present on your network to crash or disable the application by sending specially crafted requests. The flaw stems from inadequate validation of incoming data. While an attacker must have network access to exploit this, the impact is significant—your UniFi infrastructure could become unavailable, disrupting network management and potentially affecting connected devices.

• CVE-2026-54409HIGH 7.5

  UniFi Protect cameras contain an authentication bypass vulnerability that could allow an attacker with network access to gain unauthorized control over the cameras. The flaw stems from improper initialization during the application startup process. An attacker would need to be on the network and satisfy certain conditions—including user interaction—to successfully exploit this weakness, making it moderately difficult but still a serious risk in environments where the attacker has already gained network-level access.

• CVE-2026-55110HIGH 7.5

  A misconfigured CORS setting in UniFi OS allows an attacker to trick an authenticated user into visiting a malicious webpage, where JavaScript can then perform unauthorized actions on the user's UniFi system using their active session. The attacker cannot initiate the attack directly—they need the user to visit the malicious site first—but once there, they gain the same privileges as the logged-in administrator or user, potentially allowing them to modify network settings, access recordings, or reconfigure security policies.

• CVE-2026-55111HIGH 7.5

  A path traversal vulnerability in Ubiquiti's UniFi Protect Floodlight devices allows someone with network access to read files stored on the device itself. An attacker cannot modify or delete files, only view them. This is a network-based vulnerability requiring no special privileges or user interaction to exploit.

• CVE-2026-55112HIGH 7.5

  A privilege escalation vulnerability exists in UniFi OS running the UniFi Protect application. An attacker who already has network access and low-level user privileges can, under specific conditions, exploit improper access controls to gain elevated privileges on the affected device. This allows a low-privileged insider or compromised account to take full control of the host system.

• CVE-2026-55113HIGH 7.5

  A network-based Server-Side Request Forgery (SSRF) vulnerability in UniFi Talk Application allows unauthenticated attackers to trigger denial-of-service conditions and bypass authentication controls on specific API endpoints. The attacker must have network access to the vulnerable system but does not need valid credentials to initiate the attack. This vulnerability is rated HIGH severity due to its potential to disrupt service availability and circumvent security boundaries.

• CVE-2026-56842HIGH 7.5

  A flaw in Ubiquiti's UniFi Network Application allows an attacker who already has network access and holds low-level privileges to maintain elevated permissions even after an administrator removes them. The vulnerability stems from improper authorization checks—essentially, the application fails to fully revoke access rights in certain conditions, letting an attacker persist with high-level capabilities they should have lost.