UI
Vendor
UI
468
CVEs
95
On KEV
0
New 30D
Products
UD10.0
Unifi Dream Machine Pro Firmware
UI
11 CVEs3 on KEV0 new
EN10.0
Enterprise Network Video Recorder Core Firmware
UI
10 CVEs3 on KEV0 new
EN10.0
Enterprise Network Video Recorder Firmware
UI
10 CVEs3 on KEV0 new
UC10.0
Unifi Cloud Gateway Fiber Firmware
UI
10 CVEs3 on KEV0 new
UC10.0
Unifi Cloud Gateway Industrial Firmware
UI
10 CVEs3 on KEV0 new
UC10.0
Unifi Cloud Gateway Max Firmware
UI
10 CVEs3 on KEV0 new
UC10.0
Unifi Cloudkey Firmware
UI
10 CVEs3 on KEV0 new
UD10.0
Unifi Dream Machine Beast Firmware
UI
10 CVEs3 on KEV0 new
UD10.0
Unifi Dream Machine Pro Max Firmware
UI
10 CVEs3 on KEV0 new
UD10.0
Unifi Dream Machine Special Edition Firmware
UI
10 CVEs3 on KEV0 new
UD10.0
Unifi Dream Router 7 Firmware
UI
10 CVEs3 on KEV0 new
UD10.0
Unifi Dream Router Firmware
UI
10 CVEs3 on KEV0 new
UD10.0
Unifi Dream Wall Firmware
UI
10 CVEs3 on KEV0 new
UN10.0
Unifi Network Video Recorder Firmware
UI
10 CVEs3 on KEV0 new
UN10.0
Unifi Network Video Recorder G2 Firmware
UI
10 CVEs3 on KEV0 new
UN10.0
Unifi Network Video Recorder G2 Pro Firmware
UI
10 CVEs3 on KEV0 new
UN10.0
Unifi Network Video Recorder Instant Firmware
UI
10 CVEs3 on KEV0 new
UN10.0
Unifi Network Video Recorder Pro Firmware
UI
10 CVEs3 on KEV0 new
UO10.0
Unifi OS Server
UI
10 CVEs3 on KEV0 new
EF10.0
Enterprise Fortress Gateway Firmware
UI
9 CVEs3 on KEV0 new
U210.0
Unas 2 Firmware
UI
9 CVEs3 on KEV0 new
U410.0
Unas 4 Firmware
UI
9 CVEs3 on KEV0 new
UP10.0
Unas Pro 4 Firmware
UI
9 CVEs3 on KEV0 new
UP10.0
Unas Pro 8 Firmware
UI
9 CVEs3 on KEV0 new
UP10.0
Unas Pro Firmware
UI
9 CVEs3 on KEV0 new
UC10.0
Unifi Cloud Gateway Ultra Firmware
UI
9 CVEs3 on KEV0 new
UC10.0
Unifi Cloud Key Plus Firmware
UI
9 CVEs3 on KEV0 new
UC10.0
Unifi Cloudkey Enterprise Firmware
UI
9 CVEs3 on KEV0 new
UD10.0
Unifi Dream Router 5g Max Firmware
UI
9 CVEs3 on KEV0 new
UE10.0
Unifi Express 7 Firmware
UI
9 CVEs3 on KEV0 new
UD10.0
Unifi Dream Machine Firmware
UI
8 CVEs3 on KEV0 new
AI9.8
Airos
UI
5 CVEs1 on KEV0 new
UE10.0
Unifi Express Firmware
UI
1 CVEs1 on KEV0 new
UP9.9
Unifi Protect
UI
11 CVEs0 on KEV0 new
UN9.1
Unifi Network Application
UI
9 CVEs0 on KEV0 new
EF8.8
Er-x Firmware
UI
8 CVEs0 on KEV0 new
EF8.8
Er-x-sfp Firmware
UI
8 CVEs0 on KEV0 new
UV8.8
Unifi Video
UI
7 CVEs0 on KEV0 new
EF8.8
Edgeswitch Firmware
UI
5 CVEs0 on KEV0 new
EF8.8
Enterprise Firewall Core Firmware
UI
5 CVEs0 on KEV0 new
UC8.8
Unifi Controller
UI
5 CVEs0 on KEV0 new
DE7.8
Desktop
UI
4 CVEs0 on KEV0 new
EE8.8
Edgemax Edgerouter Firmware
UI
4 CVEs0 on KEV0 new
UA10.0
Unifi Access
UI
4 CVEs0 on KEV0 new
AA9.8
Airmax AC Firmware
UI
3 CVEs0 on KEV0 new
EX9.8
Edgerouter X Firmware
UI
3 CVEs0 on KEV0 new
EX8.8
Edgeswitch X
UI
3 CVEs0 on KEV0 new
US9.8
Unifi Switch Firmware
UI
3 CVEs0 on KEV0 new
UT9.9
Unifi Talk Application
UI
3 CVEs0 on KEV0 new
CG7.5
Camera G3 Flex Firmware
UI
2 CVEs0 on KEV0 new
EF9.8
Edgemax Firmware
UI
2 CVEs0 on KEV0 new
ED8.8
Edgeos
UI
2 CVEs0 on KEV0 new
EF8.8
Er-12 Firmware
UI
2 CVEs0 on KEV0 new
EF8.8
Er-4 Firmware
UI
2 CVEs0 on KEV0 new
EF8.8
Er-6p Firmware
UI
2 CVEs0 on KEV0 new
EF8.8
Er-8-xg Firmware
UI
2 CVEs0 on KEV0 new
UP8.8
Unifi Protect Firmware
UI
2 CVEs0 on KEV0 new
UU9.8
Unifi Uap Firmware
UI
2 CVEs0 on KEV0 new
AF5.9
Af-2x Firmware
UI
1 CVEs0 on KEV0 new
AF9.8
Af5 Firmware
UI
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55119 | UT Unifi Talk Application UI | 8.1 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges… |
| CVE-2026-55114 | UN Unifi Network Application UI | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges… |
| CVE-2026-56842 | UN Unifi Network Application UI | 7.5 | Jul 2 | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist… |
| CVE-2026-55116 | UC Unifi Connect UI | 9.8 | Jul 2 | A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi… |
| CVE-2026-56841 | UP Unifi Protect UI | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate… |
| CVE-2026-55115 | UP Unifi Protect UI | 9.9 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host… |
| CVE-2026-55118 | UN Unifi Network Application UI | 8.3 | Jul 2 | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application… |
| CVE-2026-55112 | UD Unifi Dream Machine Special Edition Firmware UI | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi… |
| CVE-2026-55117 | UA Unifi Access UI | 8.6 | Jul 2 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device |
| CVE-2026-55113 | UT Unifi Talk Application UI | 7.5 | Jul 2 | A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS)… |
| CVE-2026-55111 | PF Protect Floodlight Firmware UI | 7.5 | Jul 2 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight |
| CVE-2026-54401 | UP Unas Pro 8 Firmware UI | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances |
| CVE-2026-54402 | UC Unifi Cloud Gateway Fiber Firmware UI | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the… |
| CVE-2026-50747 | UT Unifi Talk Application UI | 9.9 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate… |
| CVE-2026-50746 | UC Unifi Connect Application UI | 10.0 | Jul 2 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host… |
| CVE-2026-55110 | UD Unifi Dream Machine Special Edition Firmware UI | 6.1 | Jul 2 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in… |
| CVE-2026-54404 | UN Unifi Network Video Recorder G2 Pro Firmware UI | 8.8 | Jul 2 | A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges… |
| CVE-2026-54400 | UA Unifi Access UI | 9.1 | Jul 2 | A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on… |
| CVE-2026-54406 | UN Unifi Network Application UI | 8.7 | Jul 2 | A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to… |
| CVE-2026-50748 | UA Unifi Access UI | 9.9 | Jul 2 | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command… |
| CVE-2026-54408 | UP Unifi Protect UI | 9.8 | Jul 2 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming |
| CVE-2026-54409 | UP Unifi Protect UI | 8.1 | Jul 2 | A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass… |
| CVE-2026-54403 | UD Unifi Dream Router 5g Max Firmware UI | 8.6 | Jul 2 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS… |
| CVE-2026-54405 | UN Unifi Network Application UI | 7.5 | Jul 2 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS)… |
| CVE-2026-54407 | UP Unifi Protect UI | 8.6 | Jul 2 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi… |
| CVE-2026-34911 | UC Unifi Cloud Gateway Industrial Firmware UI | 7.7 | May 22 | A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system… |
| CVE-2026-33000 | UO Unifi OS Server UI | 9.1 | May 22 | A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection |
| CVE-2026-34910 In wildKEV | UO Unifi OS Server UI | 10.0 | May 22 | Ubiquiti UniFi OS Improper Input Validation Vulnerability |
| CVE-2026-34908 In wildKEV | UC Unifi Cloud Gateway Industrial Firmware UI | 10.0 | May 22 | Ubiquiti UniFi OS Improper Access Control Vulnerability |
| CVE-2026-34909 In wildKEV | UP Unas Pro 8 Firmware UI | 10.0 | May 22 | Ubiquiti UniFi OS Path Traversal Vulnerability |
| CVE-2026-21639 | AA Airmax AC Firmware UI | 8.8 | Jan 8 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the… |
| CVE-2026-21638 | UF Ubb Firmware UI | 8.8 | Jan 8 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the… |
| CVE-2026-21635 | UC Unifi Connect EV Station Lite Firmware UI | 6.5 | Jan 5 | An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted… |
| CVE-2026-21634 | UP Unifi Protect UI | 6.5 | Jan 5 | A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart |
| CVE-2026-21633 | UP Unifi Protect UI | 8.8 | Jan 5 | A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi… |
| CVE-2025-59467 | AA Argentina Afip Invoices UI | 9.6 | Jan 5 | A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and earlier) could allow privilege escalation if an Administrator is tricked into… |
| CVE-2025-52665 | UA Unifi Access UI | 10.0 | Oct 31 | A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without… |
| CVE-2024-42025 | UN Unifi Network Application UI | 7.8 | Sep 13 | A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with… |
| CVE-2023-41721 | UN Unifi Network Application UI | 5.3 | Oct 25 | Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176 |
| CVE-2023-38034 | UU Unifi Uap Firmware UI | 9.8 | Aug 10 | A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE) |
| CVE-2023-35085 | US Unifi Switch Firmware UI | 9.8 | Aug 10 | An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote… |
| CVE-2023-31998 | AF Aircube Firmware UI | 7.5 | Jul 18 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices |
| CVE-2023-32000 | UN Unifi Network Application UI | 4.8 | Jul 8 | A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges… |
| CVE-2023-31997 | UO Unifi OS UI | 9.0 | Jul 1 | UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB |
| CVE-2023-28365 | UN Unifi Network Application UI | 9.1 | Jul 1 | A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious… |
| CVE-2023-2379 | EF Er-x Firmware UI | 7.5 | Apr 28 | A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 |
| CVE-2023-2378 | EF Er-x Firmware UI | 7.2 | Apr 28 | A flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 |
| CVE-2023-2377 | EF Er-x Firmware UI | 7.2 | Apr 28 | A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 |
| CVE-2023-2376 | EF Er-x-sfp Firmware UI | 7.2 | Apr 28 | A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 |
| CVE-2023-2375 | EF Er-x Firmware UI | 7.2 | Apr 28 | A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 |
| CVE-2023-2374 | EF Er-x Firmware UI | 7.2 | Apr 28 | A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 |
| CVE-2023-2373 | EE Edgemax Edgerouter Firmware UI | 7.2 | Apr 28 | A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 |
| CVE-2023-28124 | DE Desktop UI | 5.5 | Apr 19 | Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their… |
| CVE-2023-28123 | DE Desktop UI | 5.5 | Apr 19 | A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting.This vulnerability… |
| CVE-2023-28122 | DE Desktop UI | 7.8 | Apr 19 | A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Windows device running… |
| CVE-2023-1458 | EX Edgerouter X Firmware UI | 9.8 | Mar 25 | A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical |
| CVE-2023-1457 | EX Edgerouter X Firmware UI | 9.8 | Mar 25 | A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 |
| CVE-2023-1456 | EX Edgerouter X Firmware UI | 9.8 | Mar 25 | A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 |
| CVE-2023-24104 | UD Unifi Dream Machine Pro Firmware UI | 9.8 | Feb 23 | Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets |
| CVE-2023-23912 | UF Usg-pro-4 Firmware UI | 8.8 | Feb 9 | A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to… |