Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ubiquiti UniFi Connect EV Station Pro 1.5.27 Clear all filters
TI-2025-20070 CVE-2025-27213 · GHSA-j6c9-hh92-4hrx

Incorrect authorization in Ubiquiti UniFi Connect EV Station Pro

Priority LOW 22

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00246 Published 2025-08-21 Fixed in 1.5.27, 1.13.6 +3 CWE-863
TI-2025-20071 CVE-2025-27214 · GHSA-hf72-fxxw-c3jq

Missing authentication in Ubiquiti UniFi Connect EV Station Pro

Priority MEDIUM 49

A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00397 Published 2025-08-21 Fixed in 1.5.27 CWE-306