A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtain data from such UniFi OS devices or instances.
CVE-2026-47367 is a critical Improper Input Validation vulnerability in Ubiquiti Inc's UID Enterprise Agent. It allows a low-privileged attacker with network access to perform command injection on the host device. The vulnerability has a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability. No patch or remediation details are currently provided. There are no known exploits in the wild at this time.
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.
CVE-2026-33000 is a critical vulnerability in Ubiquiti Inc's UniFi OS Server involving improper input validation that allows a privileged network user to perform command injection. The vulnerability requires high privileges and network access, and it can lead to complete compromise of confidentiality, integrity, and availability of the affected system. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
CVE-2026-22563 is a critical vulnerability affecting Ubiquiti Inc's UniFi Play PowerAmp and UniFi Play Audio Port devices. It involves improper input validation that could allow a command injection by an attacker with access to the UniFi Play network. The vulnerability affects UniFi Play PowerAmp versions 1.0.35 and earlier, and UniFi Play Audio Port versions 1.0.24 and earlier. The vendor has released updates to address this issue: version 1.0.38 or later for UniFi Play PowerAmp and version 1.
CVE-2026-22562 is a critical Path Traversal vulnerability in Ubiquiti Inc's UniFi Play PowerAmp and UniFi Play Audio Port devices. An attacker with access to the UniFi Play network can exploit this flaw to write arbitrary files on the device, potentially leading to remote code execution. The vulnerability affects UniFi Play PowerAmp firmware versions 1.0.35 and earlier, and UniFi Play Audio Port versions 1.0.24 and earlier. Patches are available in UniFi Play PowerAmp version 1.0.38 and later, and UniFi Play Audio Port version 1.
CVE-2026-22566 is an improper access control vulnerability in Ubiquiti Inc's UniFi Play PowerAmp and UniFi Play Audio Port products. A malicious actor with access to the UniFi Play network could exploit this flaw to obtain WiFi credentials. The vulnerability affects UniFi Play PowerAmp versions 1.0.35 and earlier, and UniFi Play Audio Port versions 1.0.24 and earlier. Updates to UniFi Play PowerAmp version 1.0.38 or later and UniFi Play Audio Port version 1.
CVE-2026-22565 is an improper input validation vulnerability in Ubiquiti Inc's UniFi Play PowerAmp and UniFi Play Audio Port devices. A malicious actor with network access to these devices could exploit this flaw to cause the device to stop responding, resulting in a denial of service. The vulnerability affects UniFi Play PowerAmp versions 1.0.35 and earlier, and UniFi Play Audio Port versions 1.0.24 and earlier. Updates to UniFi Play PowerAmp version 1.0.38 or later and UniFi Play Audio Port version 1.
CVE-2026-22564 is a critical Improper Access Control vulnerability in Ubiquiti Inc's UniFi Play PowerAmp and UniFi Play Audio Port products. It allows a malicious actor with network access to enable SSH and make unauthorized system changes. The vulnerability affects UniFi Play PowerAmp versions 1.0.35 and earlier, and UniFi Play Audio Port versions 1.0.24 and earlier. A fix is available by updating to UniFi Play PowerAmp version 1.0.38 or later and UniFi Play Audio Port version 1.
CVE-2026-22559 is a high-severity vulnerability in Ubiquiti Inc's UniFi Network Server (version 10.1.85 and earlier) caused by improper input validation. This flaw can allow unauthorized account access if a user is tricked into clicking a malicious link, requiring user interaction but no prior authentication. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS score of 8.8. Exploitation could lead to full account compromise, potentially affecting network management and security configurations. The issue is resolved by updating to UniFi Network Server version 10.1.89 or later.
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.
Affected Products:
UBB-XG (Version 1.2.2 and earlier)
UDB-Pro/UDB-Pro-Sector (Version 1.4.1 and earlier)
UBB (Version 3.1.5 and earlier)
Mitigation:
Update your UBB-XG to Version 1.2.3 or later.
Update your UDB-Pro/UDB-Pro-Sector to Version 1.4.2 or later.
Update your UBB to Version 3.1.7 or later.
