UB
Vendor
Ubiquiti
35
CVEs
4
On KEV
0
New 30D
Products
UO10.0
UniFi OS
Ubiquiti
3 CVEs3 on KEV0 new
AI9.8
AirOS
Ubiquiti
1 CVEs1 on KEV0 new
UC7.5
Unifi Connect Display
Ubiquiti
3 CVEs0 on KEV0 new
UC7.5
Unifi Connect Display Cast
Ubiquiti
3 CVEs0 on KEV0 new
UC7.5
Unifi Connect EV Station
Ubiquiti
3 CVEs0 on KEV0 new
UC7.5
Unifi Connect EV Station Pro
Ubiquiti
3 CVEs0 on KEV0 new
UN9.8
Unifi Network Application
Ubiquiti
3 CVEs0 on KEV0 new
UI7.1
UniFi iOS App
Ubiquiti
2 CVEs0 on KEV0 new
UN8.3
UniFi Network Controller
Ubiquiti
2 CVEs0 on KEV0 new
UU8.3
UniFi UAP Firmware
Ubiquiti
2 CVEs0 on KEV0 new
AF6.6
Airmax Firmware
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access G2 Reader Pro
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access Intercom
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access Intercom Viewer
Ubiquiti
1 CVEs0 on KEV0 new
UA2.2
Unifi Access Reader Pro
Ubiquiti
1 CVEs0 on KEV0 new
UC7.5
Unifi Connect Application
Ubiquiti
1 CVEs0 on KEV0 new
UU5.3
UniFi U6+ Access Point
Ubiquiti
1 CVEs0 on KEV0 new
UU8.3
UniFi UAP-AC Firmware
Ubiquiti
1 CVEs0 on KEV0 new
UU8.3
UniFi USG Firmware
Ubiquiti
1 CVEs0 on KEV0 new
UU8.3
UniFi USW Firmware
Ubiquiti
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34910 In wildKEV | UO UniFi OS Ubiquiti | 10.0 | May 22 | Ubiquiti UniFi OS Improper Input Validation Vulnerability |
| CVE-2026-34908 In wildKEV | UO UniFi OS Ubiquiti | 10.0 | May 22 | Ubiquiti UniFi OS Improper Access Control Vulnerability |
| CVE-2026-34909 In wildKEV | UO UniFi OS Ubiquiti | 10.0 | May 22 | Ubiquiti UniFi OS Path Traversal Vulnerability |
| CVE-2019-25652 | UN UniFi Network Controller Ubiquiti | 7.5 | Mar 27 | UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM |
| CVE-2019-25651 | UU UniFi UAP Firmware Ubiquiti | 8.3 | Mar 27 | Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control |
| CVE-2024-45205 | UI UniFi iOS App Ubiquiti | 7.1 | Dec 4 | An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) could allow a malicious actor with access to… |
| CVE-2024-42028 | UN Unifi Network Application Ubiquiti | 8.8 | Oct 28 | A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a malicious actor with a… |
| CVE-2024-44540 | AF Airmax Firmware Ubiquiti | 6.6 | Sep 23 | Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port |
| CVE-2024-42025 | UN Unifi Network Application Ubiquiti | 7.8 | Sep 13 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with… |
| CVE-2024-37380 | UU UniFi U6+ Access Point Ubiquiti | 5.3 | Jul 22 | A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point |
| CVE-2024-34786 | UI UniFi iOS App Ubiquiti | 4.8 | Jul 9 | UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID… |
| CVE-2024-29206 | UA Unifi Access Intercom Viewer Ubiquiti | 2.2 | May 7 | An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) and make unsupported changes to the system |
| CVE-2024-29207 | UC Unifi Connect Application Ubiquiti | 7.5 | May 7 | An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of the system |
| CVE-2024-29208 | UC Unifi Connect EV Station Ubiquiti | 2.2 | May 7 | An Unverified Password Change could allow a malicious actor with API access to the device to change the system password without knowing the previous password |
| CVE-2024-27981 | UN Unifi Network Application Ubiquiti | 9.8 | Apr 4 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with… |
| CVE-2024-22054 | UU Unifi Uap Firmware Ubiquiti | 7.5 | Feb 20 | A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery |
| CVE-2010-5330 In wildKEV | AI AirOS Ubiquiti | 9.8 | Jun 11 | Ubiquiti AirOS Command Injection Vulnerability |