Vendor
Ubiquiti
57 known vulnerabilities in products by Ubiquiti, 3 of them actively exploited (CISA KEV).
Key figures
57
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
30
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability In CISA KEValso in 62 other products | 10.0 | |
| Critical | CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability In CISA KEValso in 62 other products | 10.0 | |
| Critical | CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability In CISA KEValso in 63 other products | 10.0 | |
| Critical | CVE-2026-77554 | Ubiquiti UniFi Talk Application: Improper Input Validation | 10.0 | |
| Critical | CVE-2026-77537 | Ubiquiti UniFi Protect Application: Improper Input Validation | 10.0 | |
| Critical | CVE-2026-77552 | Ubiquiti UniFi Enterprise Audio/Video Bridge: Improper Input Validation | 9.8 | |
| High | CVE-2023-2375 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2378 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2377 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2376 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2373 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| Critical | CVE-2026-77548 | Ubiquiti UniFi Protect Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77547 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77546 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77543 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77533 | Ubiquiti UniFi Protect Application: Improper Input Validation | 9.9 | |
| High | CVE-2023-2374 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| Critical | CVE-2026-77542 | Ubiquiti UID Enterprise Agent: Improper Input Validation | 9.1 | |
| Critical | CVE-2026-77540 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2026-77539 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2026-77535 | Ubiquiti UniFi Network Application: Improper Input Validation | 9.1 | |
| High | CVE-2026-110455 | Ubiquiti UniFi Protect AI Key: Improper Input Validation | 8.1 | |
| Critical | CVE-2026-33000 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2023-1458 | Ubiquiti EdgeRouter X: Command Injection | 7.2 | |
| Critical | CVE-2026-77550 | Ubiquiti UniFi OS Server: CRLF Injection | 10.0 |
News
- KEV: Lantronix, Ubiquiti UniFi OS, PTC Windchill and FlexPLM, and Cisco Unified Communications Managersans-newsbites-mail,
- Patch UniFi OS for Three CVSS 10.0 Flawssans-newsbites-mail,
Products
| Unifi | 28 | 0 |
| Edgerouter X | 10 | 0 |
| Unifi Gateways | 6 | 0 |
| Unifi OS Server | 5 | 3 |