Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 37

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00386 Published 2026-07-02 Fixed in 5.2.2 CWE-284
Priority LOW 33

A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certa…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2026-07-02 Fixed in 5.2.2 CWE-918
Priority MEDIUM 43

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00493 Published 2026-07-02 Fixed in 5.2.2 CWE-89