Ubiquiti UniFi

Name: Ubiquiti UniFi
Brand: Ubiquiti

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical1high0medium0low

updated 2026-10-26

vulnerabilities (47)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-34910US	—OT critical	45.8% (99th)	KEV	no fix	2026-05-22	≤ OS Server <5.0.8
CVE-2026-34908US	—OT critical	15.2% (97th)	KEV	no fix	2026-05-22	≤ OS Server <5.0.8
CVE-2026-34909US	—OT critical	1.79% (78th)	KEV	no fix	2026-05-22	≤ OS Server <5.0.8
CVE-2026-22557US	—	28.1% (98th)	Exploit	no fix	2026-03-19	4 versions
CVE-2025-52665US	—OT elevated	41.1% (99th)	—	no fix	2025-10-31	≤ Access Application <4.0.21
CVE-2026-47370US	—	1.44% (73rd)	—	no fix	2026-06-12	≤ OS Server <5.1.15
CVE-2026-47367US	—	1.44% (73rd)	—	no fix	2026-06-12	≤ OS Server <5.1.15
CVE-2026-33000US	—	1.44% (73rd)	—	no fix	2026-05-22	≤ OS Server <5.0.8
CVE-2024-27981US	—	1.30% (70th)	—	no fix	2024-04-04	≤ Network Application <8.1.113
CVE-2025-27212US	—	1.21% (68th)	—	no fix	2025-08-04	6 versions
CVE-2025-24285US	—	1.19% (68th)	—	no fix	2025-08-21	≤ Connect EV Station Lite <1.5.2
CVE-2025-23123US	—	1.16% (67th)	—	no fix	2025-05-19	≤ Protect Cameras <4.75.62
CVE-2026-22563US	—	1.05% (64th)	—	no fix	2026-04-13	2 versions
CVE-2024-42025US	high7.8	0.82% (57th)	—	8.4.59	2024-09-13	< 8.4.59
CVE-2026-22562US	—	0.77% (55th)	—	no fix	2026-04-13	2 versions
CVE-2025-23115US	—	0.72% (53rd)	—	no fix	2025-03-01	≤ Protect Camera <4.74.106
CVE-2025-23119US	—	0.71% (53rd)	—	no fix	2025-03-01	≤ Protect Camera <4.74.106
CVE-2026-34911US	—	0.59% (48th)	—	no fix	2026-05-22	≤ OS Server <5.0.8
CVE-2026-22558US	—	0.56% (46th)	—	no fix	2026-03-19	4 versions
CVE-2026-77558US	—	0.52% (44th)	—	no fix	2026-09-22	≤ Gateways <5.1.26
CVE-2026-77556US	—	0.52% (44th)	—	no fix	2026-09-22	≤ Gateways <5.1.26
CVE-2026-77544US	—	0.52% (44th)	—	no fix	2026-09-22	≤ Gateways <5.1.26
CVE-2025-23116US	—	0.51% (43rd)	—	no fix	2025-03-01	≤ Protect Application <5.2.49
CVE-2026-47368US	—	0.50% (42nd)	—	no fix	2026-06-12	≤ OS Server <5.1.15
CVE-2026-47369US	—	0.48% (40th)	—	no fix	2026-06-12	≤ OS Server <5.1.15
CVE-2026-95862US	—	0.46% (39th)	—	no fix	2026-09-22	≤ Gateways <5.1.26
CVE-2026-95861US	—	0.46% (39th)	—	no fix	2026-09-22	≤ Gateways <5.1.26
CVE-2026-77555US	—	0.46% (39th)	—	no fix	2026-09-22	≤ Gateways <5.1.26
CVE-2026-21633US	—	0.46% (39th)	—	no fix	2026-01-05	≤ Protect Application <6.2.72
CVE-2026-22565US	—	0.43% (37th)	—	no fix	2026-04-13	2 versions
CVE-2026-21638US	—	0.43% (37th)	—	no fix	2026-01-08	3 versions
CVE-2026-21634US	—	0.43% (36th)	—	no fix	2026-01-05	≤ Protect Application <6.2.72
CVE-2026-22564US	—	0.42% (35th)	—	no fix	2026-04-13	2 versions
CVE-2025-27214US	—OT elevated	0.40% (33rd)	—	no fix	2025-08-21	≤ Connect EV Station Pro <1.5.27
CVE-2026-48610US	—	0.37% (30th)	—	no fix	2026-06-12	≤ OS Server <5.1.15
CVE-2026-22559US	—	0.37% (30th)	—	no fix	2026-03-24	≤ Network Server <10.1.89
CVE-2026-22566US	—	0.36% (29th)	—	no fix	2026-04-13	2 versions
CVE-2025-24292US	—	0.35% (28th)	—	9.2.87	2025-06-29	< 9.2.87
CVE-2025-23164US	—	0.35% (28th)	—	no fix	2025-05-19	≤ Protect Application <5.3.45
CVE-2025-27215US	—	0.26% (17th)	—	no fix	2025-08-21	6 versions
CVE-2025-27213US	—OT elevated	0.25% (15th)	—	no fix	2025-08-21	5 versions
CVE-2025-52663US	—OT elevated	0.24% (14th)	—	no fix	2025-10-31	3 versions
CVE-2025-23117US	—OT elevated	0.24% (14th)	—	no fix	2025-03-01	≤ Protect Camera <4.74.106
CVE-2025-23091US	—	0.20% (9th)	—	4.1.11	2025-02-01	2 versions
CVE-2025-23118US	—	0.16% (5th)	—	no fix	2025-03-01	≤ Protect Camera <4.74.106
CVE-2024-42028US	—OT elevated	0.16% (5th)	—	8.5.6	2024-10-28	< 8.5.6
CVE-2024-45205US	—	0.13% (2nd)	—	no fix	2024-12-04	≤ iOS App <10.18.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation10 CVEs
CWE-284Improper Access Control6 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-287Improper Authentication4 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-125Out-of-bounds Read2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)47 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan