Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ubiquiti Express 4.0.17 Clear all filters
TI-2026-54070 CVE-2026-77550 · GHSA-grg7-48rg-2r86

A malicious actor with access to the network could exploit an Improper Neutralization of…

Priority MEDIUM 50

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instanc…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00801 Published 2026-08-26 Fixed in 5.1.37, 5.1.31 +2 CWE-93
TI-2026-54069 CVE-2026-77549 · GHSA-g4h7-m732-3278

A malicious actor with access to the network and under certain conditions could exploit…

Priority MEDIUM 41

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to suc…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00512 Published 2026-08-26 Fixed in 5.1.37, 5.1.31 +2 CWE-93