Read the docs

Ubiquiti

Records207All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical68CVSS 9.0–10.0
CVSS high100CVSS 7.0–8.9

Exploited now

Ubiquiti records in CISA KEV
TI-2026-27140 Ubiquiti UniFi OS Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-06-23TI-2026-27141 Ubiquiti UniFi OS Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-06-23TI-2026-27142 Ubiquiti UniFi OS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2026-06-23TI-2010-05027 Ubiquiti AirOS Command Injection Vulnerability Priority CRITICAL 100KEV 2022-04-15

Components

Products in the NVD configurations · select one to filter the records
Unifi Dream Machine Pro Firmware 11 records CRITICAL Unifi Protect 11 records MEDIUM Enterprise Network Video Recorder Core Firmware 10 records CRITICAL Enterprise Network Video Recorder Firmware 10 records CRITICAL Unifi Cloud Gateway Fiber Firmware 10 records CRITICAL Unifi Cloud Gateway Industrial Firmware 10 records CRITICAL Unifi Cloud Gateway Max Firmware 10 records CRITICAL Unifi Cloudkey Firmware 10 records CRITICAL

Records

8 records in Er-x-sfp Firmware · all components

TI-2023-02231 CVE-2023-2376 · GHSA-4q8x-qfxw-4fg4

Ubiquiti EdgeRouter X Web Management command injection

Priority MEDIUM 48

A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.07621 Published 2023-04-28 No fix listed CWE-74
TI-2023-09710 CVE-2023-23912 · GHSA-f52w-ff63-7f4c

Code injection in Ubiquiti EdgeRouter and USG

Priority MEDIUM 42

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00956 Published 2023-02-09 No fix listed CWE-75
TI-2023-02234 CVE-2023-2379 · GHSA-mcpg-92rm-rc27

Ubiquiti EdgeRouter X Web Service denial of service

Priority MEDIUM 41

A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01289 Published 2023-04-28 No fix listed CWE-404
TI-2019-12594 CVE-2019-16889 · GHSA-qfxx-p6hh-pg3p

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service…

Priority MEDIUM 41

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 2…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05131 Published 2019-09-25 No fix listed CWE-770
Open these records in search →