Ubiquiti UniFi: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebige Betriebssystembefehle auszuführen, vertrauliche Informationen auszulesen, Dateien zu manipulieren oder Denial-of-Service-Angriffe…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Ubiquiti UniFi Protect AI Key: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi Protect AI Key ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebige Betriebssystembefehle auszuführen, vertrauliche Informationen auszulesen, Dateien zu manipulieren oder Denial-of-Service-Angriffe durchzuführen. UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.
Open advisory with all CVEs
More on UniFi
Other advisories
- MediumCVE-2026-126759H3C ICG2000 Unified Communication Gateway: fehlende Authentifizierung für kritische Funktion
- MediumCVE-2026-126759H3C ICG2000 Unified Communication Gateway: fehlende Authentifizierung für kritische Funktion
- MediumCVE-2026-126759A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component…
- Not ratedosv:CLEANSTART-2026-UE86084Hazelcast is a unified real-time data platform combining stream processing with a fast data store
- Not ratedosv:CLEANSTART-2026-PD06409Hazelcast is a unified real-time data platform combining stream processing with a fast data store
- CriticalCVE-2026-125331HarnessRouter is a self-hosted unified API for running agent harnesses with sessions, streaming, files, cancellation, and failure handling. Prior to 0.31.8, …
- HighCVE-2026-125330HarnessRouter is a self-hosted unified API for agent harnesses. From version 0.4.2 until 0.31.7, routes that accept a session ID or response ID validate only…
- MediumCVE-2026-125328pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events pr…
Other news entries
- Attacken auf Cisco UCS Central Software und Unified CM können bevorstehenNewsheise Security
- Cisco Unified Computing System (UCS): Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityNewsCisco PSIRT
- Sophos Unified Threat Management (UTM) Software: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit AdministratorrechtenVulnerabilityBSI CERT-Bund
- Cisco Unified Communications Products Security Hardening Release: October 2026NewsCisco PSIRT
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsNewsThe Hacker News
- AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security StackNewsDark Reading
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3911