CVE-2026-22557

criticalpriority · track · 20EPSS 0.281 · 98 %ileexploit · PoCDEEURU

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

5 exploits · PoC

Likely / severe?

28.1% (98th) EPSS

CVSS 10 · critical

Is it mine?

14 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.110criticalAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · support@hackerone.comexploitability 3.9 · impact 6

v3.19.7criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:Fsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-22USCWE-22US

exploits (5)

Public proof-of-concept and weaponised exploit code.

affected products (14)

Products and version ranges known to be affected.

Ubiquiti UniFi Express <4.0.13all versionscert_bundDE
Ubiquiti UniFi Network application <10.1.89all versionscert_bundDE
Ubiquiti UniFi Network application <10.2.97all versionscert_bundDE
Ubiquiti UniFi Network application <9.0.118all versionscert_bundDE
Ubiquiti UniFi≤ Network application <9.0.118cert_bundDE
Ubiquiti UniFi≤ Express <4.0.13cert_bundDE
Ubiquiti UniFi≤ Network application <10.1.89cert_bundDE
Ubiquiti UniFi≤ Network application <10.2.97cert_bundDE
Ubiquiti Inc UniFi Network Application10.1.89 → 10.1.89enisa_euvdEU
Ubiquiti Inc UniFi Network Application10.2.97 → 10.2.97enisa_euvdEU
Ubiquiti Inc UniFi Network Application9.0.118 → 9.0.118enisa_euvdEU
Ubiquiti Networks UniFi Express≤ 9.0.114fstec_bduRU
Ubiquiti Networks UniFi Network≤ 10.2.93fstec_bduRU
Ubiquiti Networks UniFi Network≤ 10.1.85fstec_bduRU

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-0784Ubiquiti UniFi Network Application: Mehrere Schwachstellen ermöglichen PrivilegieneskalationDeutsch2026-03-18csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi Network Application ausnutzen, um seine Privilegien zu erhöhen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2026-03-19modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan