Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 43

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) at…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00261 Published 2026-10-14 Fixed in 2.2.8 CWE-284
Priority LOW 17

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00261 Published 2026-10-14 Fixed in 2.2.8 CWE-22
Priority LOW 17

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00267 Published 2026-10-14 Fixed in 2.2.8 CWE-22
Priority LOW 30

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00262 Published 2026-10-14 Fixed in 2.2.8 CWE-284
Priority MEDIUM 40

A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01205 Published 2026-10-14 Fixed in 2.2.8 CWE-20
Priority LOW 30

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00251 Published 2026-10-14 Fixed in 2.2.8 CWE-284