Read the docs
TI-2026-17427 Aliases CVE-2026-21635GHSA-g45v-2mf6-hj9w

Improper access control in Ubiquiti UniFi Connect EV Station Lite

Priority LOW 28CWE-284Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.

Summary

An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted via Ethernet.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0015 4th percentileScored 2026-11-07
Fix Fixed UniFi Connect EV Station Lite (Ubiquiti Inc): 1.6.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
UbiquitiUniFi Connect EV Station Litebefore 1.6.11.6.1Patch availableCNA
  • UniFi Connect EV Station Lite VendorUbiquiti Affected before 1.6.1 Fixed in 1.6.1 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:ui:unifi_connect_ev_station_lite_firmware:*:*:*:*:*:*:*:*before 1.6.1VulnerableUbiquiti
cpe:2.3:h:ui:unifi_connect_ev_station_lite:-:*:*:*:*:*:*:*not specified by NVDRunning onUbiquiti
  • cpe:2.3:o:ui:unifi_connect_ev_station_lite_firmware:*:*:*:*:*:*:*:* Versions before 1.6.1 Vulnerable ·Ubiquiti
  • cpe:2.3:h:ui:unifi_connect_ev_station_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ubiquiti

Remediation

  • Fix · CNA UniFi Connect EV Station Lite (Ubiquiti Inc) Fixed in 1.6.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-21635
  2. 2026-10-03 Alias added: GHSA-g45v-2mf6-hj9w

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences