Vendor
Ubiquiti
118 known vulnerabilities in products by Ubiquiti, 4 of them actively exploited (CISA KEV).
Key figures
118
Vulnerabilities
4
Actively exploited (KEV)
0
Used by ransomware
30
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability In CISA KEValso in 32 other products | 10.0 | |
| Critical | CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability In CISA KEValso in 32 other products | 10.0 | |
| Critical | CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability In CISA KEValso in 33 other products | 10.0 | |
| Critical | CVE-2010-5330 | Ubiquiti AirOS Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-52665 | Ubiquiti UniFi Access Application: security vulnerability | 10.0 | |
| Critical | CVE-2015-9266 | Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload | 9.8 | |
| High | CVE-2023-2375 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| Critical | CVE-2026-54402 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-50746 | Ubiquiti UniFi Connect Application: Improper Access Control | 10.0 | |
| High | CVE-2023-2378 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2377 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2376 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2373 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| High | CVE-2023-2374 | Ubiquiti EdgeRouter X Web Management command injection | 7.2 | |
| Critical | CVE-2026-50748 | Ubiquiti UniFi Access Application: Improper Input Validation | 9.9 | |
| Critical | CVE-2020-8171 | UI AirOS: Command Injection | 9.8 | |
| High | CVE-2017-0938 | UI AirOS: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2020-12695 | HP Envy 5000 M2u91a: security vulnerability | 7.5 | |
| Critical | CVE-2020-8234 | Ubiquiti Edgemax Firmware: Insufficient Session Expiration | 9.8 | |
| High | CVE-2020-8233 | Ubiquiti Edgeswitch Firmware: Command Injection | 8.8 | |
| High | CVE-2019-16889 | Ubiquiti Ep-r6 Firmware: Denial of Service | 7.5 | |
| Critical | CVE-2026-33000 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2023-1458 | Ubiquiti EdgeRouter X: Command Injection | 7.2 | |
| High | CVE-2018-5265 | Ubiquiti Edgeos: Code Execution | 7.2 | |
| High | CVE-2019-5425 | Ubiquiti Networks EdgeMAX: Privilege Escalation | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,
- Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OSthehackernews,
- Ubiquiti Patches Critical UniFi Vulnerabilitiessans-newsbites-mail,
- KEV: Lantronix, Ubiquiti UniFi OS, PTC Windchill and FlexPLM, and Cisco Unified Communications Managersans-newsbites-mail,
- Patch UniFi OS for Three CVSS 10.0 Flawssans-newsbites-mail,