UN
Product
Unifi Network Application
9
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 2Low 0
Watch
Add Unifi Network Application to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28365 | 9.1 | Jul 1 | A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious… Affected: before 7.4.156 |
| CVE-2026-55114 | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges… Affected: before 10.4.57 |
| CVE-2026-54406 | 8.7 | Jul 2 | A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to… Affected: before 10.4.57 |
| CVE-2026-55118 | 8.3 | Jul 2 | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application… Affected: before 10.4.57 |
| CVE-2024-42025 | 7.8 | Sep 13 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with… Affected: before 8.4.59 |
| CVE-2026-56842 | 7.5 | Jul 2 | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist… Affected: before 10.4.57 |
| CVE-2026-54405 | 7.5 | Jul 2 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS)… Affected: before 10.4.57 |
| CVE-2023-41721 | 5.3 | Oct 25 | Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176 Affected: through 7.5.176 |
| CVE-2023-32000 | 4.8 | Jul 8 | A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges… Affected: through 7.3.83 |
Showing 9