CVE Program partner
Ubiquiti
Ubiquiti, Inc.
CVEs, 365 days3535 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Ubiquiti, Inc. |
| Role | CNA |
| Type | Vendor |
| Reports to | mitre |
| Scope | Vulnerabilities in all Ubiquiti products and products of Ubiquiti subsidiaries only. |
| Advisories | https://community.ui.com/releases?security-updates |
Latest CVEs · RSS
- CVE-2026-110459 2026-10-14 · CVSS 8.6A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make un
- CVE-2026-110458 2026-10-14 · CVSS 3.7A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create o
- CVE-2026-110457 2026-10-14 · CVSS 3.7A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain i
- CVE-2026-110456 2026-10-14 · CVSS 5.3A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key t
- CVE-2026-110455 2026-10-14 · CVSS 8.1A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key
- CVE-2026-110454 2026-10-14 · CVSS 5.3A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources t
- CVE-2026-95862 2026-09-22 · CVSS 7.5A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Se
- CVE-2026-95861 2026-09-22 · CVSS 7.5A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of
- CVE-2026-77558 2026-09-22 · CVSS 7.5A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Ser
- CVE-2026-77556 2026-09-22 · CVSS 7.5A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Ser
- CVE-2026-77555 2026-09-22 · CVSS 7.5A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Se
- CVE-2026-77544 2026-09-22 · CVSS 7.5A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Se
- CVE-2026-77532 2026-08-26 · CVSS 8.8A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Re
- CVE-2026-77557 2026-08-26 · CVSS 9.8A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the
- CVE-2026-77554 2026-08-26 · CVSS 10.0A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injec
- CVE-2026-77553 2026-08-26 · CVSS 9.9A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to esca
- CVE-2026-77552 2026-08-26 · CVSS 9.8A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a
- CVE-2026-77551 2026-08-26 · CVSS 9.0A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display
- CVE-2026-77550 2026-08-26 · CVSS 10.0A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS
- CVE-2026-77549 2026-08-26 · CVSS 9.0A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in cert
- CVE-2026-77548 2026-08-26 · CVSS 9.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to e
- CVE-2026-77547 2026-08-26 · CVSS 9.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to ex
- CVE-2026-77546 2026-08-26 · CVSS 9.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to ex
- CVE-2026-77545 2026-08-26 · CVSS 9.0A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devi
- CVE-2026-77543 2026-08-26 · CVSS 9.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to ex