Ubiquiti Inc Network Attached Storage
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
by severity
3critical4high1medium0low
updated 2026-10-27
01
vulnerabilities (47)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-50746US | — | Exploit |
| CVE-2026-77542US | — | Exploit |
| CVE-2026-54402US | high8.8 | — |
| CVE-2026-77554US | — | — |
| CVE-2026-77552US | — | — |
| CVE-2026-77537US | — | — |
| CVE-2026-50748US | — | — |
| CVE-2026-77548US | — | — |
| CVE-2026-77547US | — | — |
| CVE-2026-77546US | — | — |
| CVE-2026-77543US | — | — |
| CVE-2026-77533US | — | — |
| CVE-2026-77540US | — | — |
| CVE-2026-77539US | — | — |
| CVE-2026-77535US | — | — |
| CVE-2026-77550US | — | — |
| CVE-2026-54403US | — | — |
| CVE-2026-54406US | — | — |
| CVE-2026-54408US | critical9.8 | — |
| CVE-2026-55117US | — | — |
| CVE-2026-77557US | — | — |
| CVE-2026-54400US | — | — |
| CVE-2026-54405US | — | — |
| CVE-2026-77549US | — | — |
| CVE-2026-55111US | — | — |
| CVE-2026-56841US | — | — |
| CVE-2026-54404US | — | — |
| CVE-2026-50747US | — | — |
| CVE-2026-55115US | critical9.9 | — |
| CVE-2026-77553US | — | — |
| CVE-2026-77534US | — | — |
| CVE-2026-55114US | — | — |
| CVE-2026-77541US | — | — |
| CVE-2026-54407US | — | — |
| CVE-2026-54409US | high8.1 | — |
| CVE-2026-77545US | —OT elevated | — |
| CVE-2026-54401US | high8.8 | — |
| CVE-2026-77536US | — | — |
| CVE-2026-55116US | critical9.8 | — |
| CVE-2026-77538US | — | — |
| CVE-2026-55119US | — | — |
| CVE-2026-77551US | — | — |
| CVE-2026-55113US | — | — |
| CVE-2026-55118US | — | — |
| CVE-2026-56842US | —OT elevated | — |
| CVE-2026-55112US | high8.8 | — |
| CVE-2026-55110US | medium6.1 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-284Improper Access Control16 CVEs
- CWE-20Improper Input Validation15 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
- CWE-918Server-Side Request Forgery (SSRF)3 CVEs
- CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')2 CVEs
- CWE-489Active Debug Code1 CVEs
- CWE-665Improper Initialization1 CVEs
03
sources (2)
Which sources assert this record, and when.
- NLNCSC-NL (CSAF)47 CVEs
- EUEU Vulnerability Database (ENISA)5 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan