Vendor
Ubiquiti Inc
126 known vulnerabilities in products by Ubiquiti Inc, 3 of them actively exploited (CISA KEV).
Key figures
126
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
56
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability In CISA KEValso in 32 other products | 10.0 | |
| Critical | CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability In CISA KEValso in 32 other products | 10.0 | |
| Critical | CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability In CISA KEValso in 32 other products | 10.0 | |
| Critical | CVE-2026-22557 | Ubiquiti UniFi Network Application: Path Traversal | 10.0 | |
| Critical | CVE-2025-52665 | Ubiquiti UniFi Access Application: security vulnerability | 10.0 | |
| Critical | CVE-2026-77554 | Ubiquiti UniFi Talk Application: Improper Input Validation | 10.0 | |
| Critical | CVE-2026-77537 | Ubiquiti UniFi Protect Application: Improper Input Validation | 10.0 | |
| Critical | CVE-2026-77552 | Ubiquiti UniFi Enterprise Audio/Video Bridge: Improper Input Validation | 9.8 | |
| Critical | CVE-2026-54402 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-50746 | Ubiquiti UniFi Connect Application: Improper Access Control | 10.0 | |
| Critical | CVE-2026-77548 | Ubiquiti UniFi Protect Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77543 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77547 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77546 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77533 | Ubiquiti UniFi Protect Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-50748 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-77540 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2026-77539 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2026-77542 | Ubiquiti UID Enterprise Agent: Improper Input Validation | 9.1 | |
| Critical | CVE-2026-77535 | Ubiquiti UniFi Network Application: Improper Input Validation | 9.1 | |
| High | CVE-2026-110455 | Ubiquiti UniFi Protect AI Key: Improper Input Validation | 8.1 | |
| Critical | CVE-2020-37052 | AirControl 1.4.2 - PreAuth Remote Code Execution | 9.8 | |
| Critical | CVE-2026-33000 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2026-77550 | Ubiquiti UniFi OS Server: CRLF Injection | 10.0 | |
| Critical | CVE-2026-22563 | Ubiquiti UniFi Play PowerAmp: Improper Input Validation | 9.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OSthehackernews,
- Ubiquiti Patches Critical UniFi Vulnerabilitiessans-newsbites-mail,
- KEV: Lantronix, Ubiquiti UniFi OS, PTC Windchill and FlexPLM, and Cisco Unified Communications Managersans-newsbites-mail,
- Patch UniFi OS for Three CVSS 10.0 Flawssans-newsbites-mail,