Ubiquiti Inc UniFi OS Server
ProduktEUEin im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.
nach Schweregrad
3critical4high1medium0low
aktualisiert 2026-10-30
01
Schwachstellen (55)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||||
|---|---|---|---|---|---|---|
| CVE-2026-34910US | —OT kritisch | KEV | ||||
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. | ||||||
| CVE-2026-34908US | —OT kritisch | KEV | ||||
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. | ||||||
| CVE-2026-34909US | —OT kritisch | KEV | ||||
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulat… | ||||||
| CVE-2026-50746US | — | Exploit | ||||
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host de… | ||||||
| CVE-2026-77542US | — | Exploit | ||||
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injecti… | ||||||
| CVE-2026-54402US | high8.8 | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the hos… | ||||||
| CVE-2026-77554US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host dev… | ||||||
| CVE-2026-77552US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on… | ||||||
| CVE-2026-77537US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host… | ||||||
| CVE-2026-50748US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje… | ||||||
| CVE-2026-77548US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Inj… | ||||||
| CVE-2026-77547US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje… | ||||||
| CVE-2026-77546US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje… | ||||||
| CVE-2026-77543US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Inje… | ||||||
| CVE-2026-77533US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Inj… | ||||||
| CVE-2026-77540US | — | — | ||||
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on… | ||||||
| CVE-2026-77539US | — | — | ||||
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on… | ||||||
| CVE-2026-77535US | — | — | ||||
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command In… | ||||||
| CVE-2026-33000US | — | — | ||||
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. | ||||||
| CVE-2026-47370US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Comm… | ||||||
| CVE-2026-77550US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentica… | ||||||
| CVE-2026-54403US | — | — | ||||
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS device… | ||||||
| CVE-2026-34911US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that… | ||||||
| CVE-2026-54406US | — | — | ||||
A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalat… | ||||||
| CVE-2026-54408US | critical9.8 | — | ||||
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming. | ||||||
| CVE-2026-55117US | — | — | ||||
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device. | ||||||
| CVE-2026-77557US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device. | ||||||
| CVE-2026-54400US | — | — | ||||
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on… | ||||||
| CVE-2026-54405US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack… | ||||||
| CVE-2026-77549US | — | — | ||||
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running… | ||||||
| CVE-2026-55111US | — | — | ||||
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight. | ||||||
| CVE-2026-56841US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges… | ||||||
| CVE-2026-54404US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges withi… | ||||||
| CVE-2026-50747US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate pr… | ||||||
| CVE-2026-55115US | critical9.9 | — | ||||
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host d… | ||||||
| CVE-2026-77553US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on t… | ||||||
| CVE-2026-77534US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privile… | ||||||
| CVE-2026-55114US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges wit… | ||||||
| CVE-2026-77541US | — | — | ||||
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges wi… | ||||||
| CVE-2026-54407US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Pro… | ||||||
| CVE-2026-54409US | high8.1 | — | ||||
A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authen… | ||||||
| CVE-2026-77545US | —OT erhöht | — | ||||
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS… | ||||||
| CVE-2026-54401US | high8.8 | — | ||||
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances. | ||||||
| CVE-2026-77536US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privile… | ||||||
| CVE-2026-55116US | critical9.8 | — | ||||
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi… | ||||||
| CVE-2026-77538US | — | — | ||||
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Conne… | ||||||
| CVE-2026-55119US | — | — | ||||
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within… | ||||||
| CVE-2026-77551US | — | — | ||||
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate… | ||||||
| CVE-2026-55113US | — | — | ||||
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) a… | ||||||
| CVE-2026-55118US | — | — | ||||
A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application t… | ||||||
50 von 55 angezeigt
02
Schwächen (8)
Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.
- CWE-20Improper Input Validation19 CVEs
- CWE-284Improper Access Control17 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory7 CVEs
- CWE-89Improper Neutralization of Special Elements used in an SQL Command3 CVEs
- CWE-918Server-Side Request Forgery3 CVEs
- CWE-93Improper Neutralization of CRLF Sequences2 CVEs
- CWE-489Active Debug Code1 CVEs
- CWE-665Improper Initialization1 CVEs
03
Datenquellen (2)
Welche Quellen diesen Datensatz belegen und wann.
- NLNCSC-NL (CSAF)47 CVEs
- EUEU Vulnerability Database (ENISA)13 CVEs
scry
Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan