Skip to content

#unifi

3 articles

Security Alerts Aug 27, 2026

UniFi OS: 12 Vulnerabilities Including Authentication Bypass (CVE-2026-77550)

Ubiquiti published a bulletin covering 12 vulnerabilities in UniFi OS and UniFi applications. The most severe lets an attacker with network access bypass authentication on UniFi OS devices...

Security Alerts Jan 5, 2026

CVE-2026-22557: Critical Path Traversal in Ubiquiti UniFi Network (CVSS 10.0)

Critical Path Traversal vulnerability in Ubiquiti UniFi Network Application (CVSS 10.0) allows unauthenticated attackers to access OS files and achieve account takeover. Affects Dream Machine and all UniFi Network Application installations <= 10.1.85.

Security Alerts Jan 4, 2026

CVE-2026-22558: Ubiquiti UniFi Network NoSQL Injection Vulnerability (CVSS 7.7)

NoSQL Injection vulnerability in Ubiquiti UniFi Network Application (CVSS 7.7) enables authenticated attackers to escalate privileges. When chained with CVE-2026-22557 (CVSS 10.0), it creates an attack chain leading to full system compromise.