UI
Vendor
Ubiquiti Inc
476
CVEs
94
On KEV
13
New 30D
Products
UP9.8
UniFi Protect AI Key
Ubiquiti Inc
7 CVEs0 on KEV6 new
AM8.8
airMAX M
Ubiquiti Inc
4 CVEs0 on KEV4 new
LP8.8
LTU PTMP
Ubiquiti Inc
1 CVEs0 on KEV1 new
LP8.8
LTU PTP
Ubiquiti Inc
1 CVEs0 on KEV1 new
SS8.8
SolarPoint / SolarSwitch
Ubiquiti Inc
1 CVEs0 on KEV1 new
E710.0
Express 7
Ubiquiti Inc
25 CVEs3 on KEV0 new
UO10.0
UniFi OS Server
Ubiquiti Inc
20 CVEs3 on KEV0 new
EF10.0
EFG
Ubiquiti Inc
8 CVEs3 on KEV0 new
UC10.0
UCG-Fiber
Ubiquiti Inc
8 CVEs3 on KEV0 new
UC10.0
UCG-Industrial
Ubiquiti Inc
8 CVEs3 on KEV0 new
UC10.0
UCG-Max
Ubiquiti Inc
8 CVEs3 on KEV0 new
UC10.0
UCG-Ultra
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDM
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDM-Beast
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDM-Pro
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDM-Pro-Max
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDM-SE
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDR
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDR-5G
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDR7
Ubiquiti Inc
8 CVEs3 on KEV0 new
UD10.0
UDW
Ubiquiti Inc
8 CVEs3 on KEV0 new
EN10.0
ENVR
Ubiquiti Inc
7 CVEs3 on KEV0 new
EN10.0
ENVR-Core
Ubiquiti Inc
7 CVEs3 on KEV0 new
UC10.0
UCK
Ubiquiti Inc
7 CVEs3 on KEV0 new
UC10.0
UCK-Enterprise
Ubiquiti Inc
7 CVEs3 on KEV0 new
UC10.0
UCKP
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNAS-2
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNAS-4
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNAS-Pro
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNAS-Pro-4
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNAS-Pro-8
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNVR
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNVR-G2
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNVR-G2-Pro
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNVR-Instant
Ubiquiti Inc
7 CVEs3 on KEV0 new
UN10.0
UNVR-Pro
Ubiquiti Inc
7 CVEs3 on KEV0 new
EX10.0
Express
Ubiquiti Inc
12 CVEs1 on KEV0 new
CG10.0
Cloud Gateways
Ubiquiti Inc
18 CVEs0 on KEV0 new
DM10.0
Dream Machines
Ubiquiti Inc
18 CVEs0 on KEV0 new
DR10.0
Dream Routers
Ubiquiti Inc
18 CVEs0 on KEV0 new
DW10.0
Dream Wall
Ubiquiti Inc
18 CVEs0 on KEV0 new
CK10.0
Cloud Keys
Ubiquiti Inc
11 CVEs0 on KEV0 new
EF10.0
Enterprise Firewall Core
Ubiquiti Inc
11 CVEs0 on KEV0 new
EF10.0
Enterprise Fortress Gateway
Ubiquiti Inc
11 CVEs0 on KEV0 new
NV10.0
Network Video Recorders
Ubiquiti Inc
11 CVEs0 on KEV0 new
NA10.0
Network Attached Storage
Ubiquiti Inc
10 CVEs0 on KEV0 new
UP10.0
UniFi Protect Application
Ubiquiti Inc
8 CVEs0 on KEV0 new
UA9.9
UniFi Access Application
Ubiquiti Inc
7 CVEs0 on KEV0 new
UN9.1
UniFi Network Application
Ubiquiti Inc
7 CVEs0 on KEV0 new
EF7.5
Enterprise Firewalls
Ubiquiti Inc
6 CVEs0 on KEV0 new
EV8.8
Enterprise Video Recorders
Ubiquiti Inc
6 CVEs0 on KEV0 new
UG7.5
UniFi Gateways
Ubiquiti Inc
6 CVEs0 on KEV0 new
EN10.0
Enterprise Network Attached Storage
Ubiquiti Inc
5 CVEs0 on KEV0 new
EN10.0
Enterprise Network Video Recorders
Ubiquiti Inc
5 CVEs0 on KEV0 new
UT10.0
UniFi Talk Application
Ubiquiti Inc
4 CVEs0 on KEV0 new
UE9.9
UID Enterprise Agent
Ubiquiti Inc
2 CVEs0 on KEV0 new
UC10.0
UniFi Connect Application
Ubiquiti Inc
2 CVEs0 on KEV0 new
EE8.8
EdgeMAX EdgeSwitch
Ubiquiti Inc
1 CVEs0 on KEV0 new
UC9.0
UniFi Connect Display Cast Pro
Ubiquiti Inc
1 CVEs0 on KEV0 new
UE9.8
UniFi Enterprise Audio/Video Bridge
Ubiquiti Inc
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116839 New | AM airMAX M Ubiquiti Inc | 7.1 | Oct 27 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make… |
| CVE-2026-116838 New | AM airMAX M Ubiquiti Inc | 8.8 | Oct 27 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a… |
| CVE-2026-116837 New | LP LTU PTP Ubiquiti Inc | 8.8 | Oct 27 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to… |
| CVE-2026-116836 New | AM airMAX M Ubiquiti Inc | 8.8 | Oct 27 | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to… |
| CVE-2026-110459 | UP UniFi Protect AI Key Ubiquiti Inc | 8.6 | Oct 14 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes,… |
| CVE-2026-110458 | UP UniFi Protect AI Key Ubiquiti Inc | 3.7 | Oct 14 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on… |
| CVE-2026-110457 | UP UniFi Protect AI Key Ubiquiti Inc | 3.7 | Oct 14 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about… |
| CVE-2026-110456 | UP UniFi Protect AI Key Ubiquiti Inc | 5.3 | Oct 14 | A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal… |
| CVE-2026-110455 | UP UniFi Protect AI Key Ubiquiti Inc | 8.1 | Oct 14 | A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a… |
| CVE-2026-110454 | UP UniFi Protect AI Key Ubiquiti Inc | 5.3 | Oct 14 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device |
| CVE-2026-95862 | E7 Express 7 Ubiquiti Inc | 7.5 | Sep 22 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack… |
| CVE-2026-95861 | DW Dream Wall Ubiquiti Inc | 7.5 | Sep 22 | A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS)… |
| CVE-2026-77558 | EX Express Ubiquiti Inc | 7.5 | Sep 22 | A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack… |
| CVE-2026-77556 | EF Enterprise Firewalls Ubiquiti Inc | 7.5 | Sep 22 | A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack… |
| CVE-2026-77555 | EF Enterprise Firewalls Ubiquiti Inc | 7.5 | Sep 22 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack… |
| CVE-2026-77544 | UG UniFi Gateways Ubiquiti Inc | 7.5 | Sep 22 | A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack… |
| CVE-2026-77532 | EE EdgeMAX EdgeSwitch Ubiquiti Inc | 8.8 | Aug 26 | A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution… |
| CVE-2026-77557 | UP UniFi Protect AI Key Ubiquiti Inc | 9.8 | Aug 26 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device |
| CVE-2026-77554 | UT UniFi Talk Application Ubiquiti Inc | 10.0 | Aug 26 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host… |
| CVE-2026-77553 | UA UniFi Access Application Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on… |
| CVE-2026-77552 | UE UniFi Enterprise Audio/Video Bridge Ubiquiti Inc | 9.8 | Aug 26 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection… |
| CVE-2026-77551 | UC UniFi Connect Display Cast Pro Ubiquiti Inc | 9.0 | Aug 26 | A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to… |
| CVE-2026-77550 | DM Dream Machines Ubiquiti Inc | 10.0 | Aug 26 | A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass… |
| CVE-2026-77549 | UO UniFi OS Server Ubiquiti Inc | 9.0 | Aug 26 | A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running… |
| CVE-2026-77548 | UP UniFi Protect Application Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command… |
| CVE-2026-77547 | UA UniFi Access Application Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command… |
| CVE-2026-77546 | UA UniFi Access Application Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command… |
| CVE-2026-77545 | EF Enterprise Fortress Gateway Ubiquiti Inc | 9.0 | Aug 26 | A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi… |
| CVE-2026-77543 | UA UniFi Access Application Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command… |
| CVE-2026-77542 | UE UID Enterprise Agent Ubiquiti Inc | 9.1 | Aug 26 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command… |
| CVE-2026-77541 | UN UniFi Network Application Ubiquiti Inc | 9.1 | Aug 26 | A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges… |
| CVE-2026-77540 | UO UniFi OS Server Ubiquiti Inc | 9.1 | Aug 26 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection… |
| CVE-2026-77539 | UO UniFi OS Server Ubiquiti Inc | 9.1 | Aug 26 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection… |
| CVE-2026-77538 | UC UniFi Connect Application Ubiquiti Inc | 8.2 | Aug 26 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi… |
| CVE-2026-77537 | UP UniFi Protect Application Ubiquiti Inc | 10.0 | Aug 26 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host… |
| CVE-2026-77536 | EF Enterprise Firewall Core Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate… |
| CVE-2026-77535 | UN UniFi Network Application Ubiquiti Inc | 9.1 | Aug 26 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command… |
| CVE-2026-77534 | EF Enterprise Fortress Gateway Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate… |
| CVE-2026-77533 | UP UniFi Protect Application Ubiquiti Inc | 9.9 | Aug 26 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command… |
| CVE-2026-55119 | UT UniFi Talk Application Ubiquiti Inc | 8.1 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges… |
| CVE-2026-55114 | UN UniFi Network Application Ubiquiti Inc | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges… |
| CVE-2026-56842 | UN UniFi Network Application Ubiquiti Inc | 7.5 | Jul 2 | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist… |
| CVE-2026-55116 | EF Enterprise Firewall Core Ubiquiti Inc | 9.8 | Jul 2 | A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi… |
| CVE-2026-56841 | UP UniFi Protect Application Ubiquiti Inc | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate… |
| CVE-2026-55115 | UP UniFi Protect Application Ubiquiti Inc | 9.9 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host… |
| CVE-2026-55118 | UN UniFi Network Application Ubiquiti Inc | 8.3 | Jul 2 | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application… |
| CVE-2026-55112 | CK Cloud Keys Ubiquiti Inc | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi… |
| CVE-2026-55117 | UA UniFi Access Application Ubiquiti Inc | 8.6 | Jul 2 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device |
| CVE-2026-55113 | UT UniFi Talk Application Ubiquiti Inc | 7.5 | Jul 2 | A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS)… |
| CVE-2026-55111 | UP UniFi Protect Floodlight Ubiquiti Inc | 7.5 | Jul 2 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight |
| CVE-2026-54401 | EV Enterprise Video Recorders Ubiquiti Inc | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances |
| CVE-2026-54402 | DR Dream Routers Ubiquiti Inc | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the… |
| CVE-2026-50747 | UT UniFi Talk Application Ubiquiti Inc | 9.9 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate… |
| CVE-2026-50746 | UC UniFi Connect Application Ubiquiti Inc | 10.0 | Jul 2 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host… |
| CVE-2026-55110 | EF Enterprise Fortress Gateway Ubiquiti Inc | 6.1 | Jul 2 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in… |
| CVE-2026-54404 | CK Cloud Keys Ubiquiti Inc | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges… |
| CVE-2026-54400 | UA UniFi Access Application Ubiquiti Inc | 9.1 | Jul 2 | A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on… |
| CVE-2026-54406 | UN UniFi Network Application Ubiquiti Inc | 8.7 | Jul 2 | A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to… |
| CVE-2026-50748 | UA UniFi Access Application Ubiquiti Inc | 9.9 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command… |
| CVE-2026-54408 | UP UniFi Protect Application Ubiquiti Inc | 9.8 | Jul 2 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming |
