Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority LOW 35

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-02 Fixed in 10.4.57 CWE-863
Priority MEDIUM 40

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2026-07-02 Fixed in 10.4.57 CWE-284
Priority LOW 36

A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi N…

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00367 Published 2026-07-02 Fixed in 10.4.57 CWE-284
Priority LOW 38

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00587 Published 2026-07-02 Fixed in 10.4.57 CWE-22
Priority LOW 39

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2026-07-02 Fixed in 10.4.57 CWE-20