Browse CVEs

HIGH 8.8 CVE-2026-21638 A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code exec… Ubb Xg Firmware 1.2.3 / 1.4.2+ Fix from $1,9502026-01-08 HIGH 8.8 CVE-2026-21639 A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code exec… Airmax Ac Firmware 1.2.3 / 2.6.8+ Fix from $1,9502026-01-08 HIGH 8.8 CVE-2026-21633 A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol v… Unifi Protect 6.2.72+ Fix from $1,9502026-01-05 MEDIUM 6.5 CVE-2026-21634 A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol ca… Unifi Protect 6.2.72+ Fix from $1,6002026-01-05 MEDIUM 6.5 CVE-2026-21635 An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a… Unifi Connect Ev Station Lite Firmware 1.6.1+ Fix from $1,6002026-01-05 CRITICAL 9.6 CVE-2025-59467 A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP invoices Plugin (v1.2.0 and earlier) could allow privilege escalation if an Adm… Argentina Afip Invoices 1.3.0+ Fix from $2,3002026-01-05 CRITICAL 10.0 CVE-2025-52665EPSS 41% A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that expos… Unifi Access 4.0.21+ Fix from $2,3002025-10-31 HIGH 7.8 CVE-2024-42025 A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) al… Unifi Network Application 8.4.59+ Fix from $1,9502024-09-13 MEDIUM 5.3 CVE-2023-41721 Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adop… Unifi Network Application after 7.5.176 Fix from $1,6002023-10-25 CRITICAL 9.8 CVE-2023-35085 An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings … Unifi Uap Firmware after 6.5.50 Fix from $2,3002023-08-10 CRITICAL 9.8 CVE-2023-38034 A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a … Unifi Uap Firmware after 6.5.53 Fix from $2,3002023-08-10 HIGH 7.5 CVE-2023-31998 A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. Edgemax Edgerouter Firmware 2.8.9+ Fix from $1,9502023-07-18 CRITICAL 9.1 CVE-2023-28365 A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administra… Unifi Network Application 7.4.156+ Fix from $2,3002023-07-01 CRITICAL 9.0 CVE-2023-31997 UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud… Unifi Os Mitigation only Fix from $2,3002023-07-01 HIGH 7.5 CVE-2023-2379 A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component We… Er X Firmware 2.0.9+ Fix from $1,9502023-04-28 HIGH 7.2 CVE-2023-2377EPSS 8% A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Manageme… Er X Firmware 2.0.9+ Fix from $1,9502023-04-28 HIGH 7.2 CVE-2023-2378EPSS 8% A flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown function of the component Web Management Interface. This… Er X Firmware 2.0.9+ Fix from $1,9502023-04-28 HIGH 7.2 CVE-2023-2376EPSS 8% A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element is an unknown function of the componen… Er X Firmware 2.0.9+ Fix from $1,9502023-04-28 HIGH 7.2 CVE-2023-2374EPSS 7% A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Ma… Er X Firmware 2.0.9+ Fix from $1,9502023-04-28 HIGH 7.2 CVE-2023-2375EPSS 9% A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interfa… Er X Firmware 2.0.9+ Fix from $1,9502023-04-28 HIGH 7.2 CVE-2023-2373EPSS 8% A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management… Edgemax Edgerouter Firmware 2.0.9+ Fix from $1,9502023-04-28 HIGH 7.8 CVE-2023-28122 A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access… Desktop 0.62.3.0+ Fix from $1,9502023-04-19 MEDIUM 5.5 CVE-2023-28123 A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN i… Desktop 0.62.3.0+ Fix from $1,6002023-04-19 MEDIUM 5.5 CVE-2023-28124 Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configur… Desktop 0.62.3.0+ Fix from $1,6002023-04-19 CRITICAL 9.8 CVE-2023-1458 A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown funct… Edgerouter X Firmware No fix yet Fix from $2,3002023-03-25 CRITICAL 9.8 CVE-2023-1456 A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing… Edgerouter X Firmware Mitigation only Fix from $2,3002023-03-25 CRITICAL 9.8 CVE-2023-1457 A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the componen… Edgerouter X Firmware Mitigation only Fix from $2,3002023-03-25 CRITICAL 9.8 CVE-2023-24104 Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets. Unifi Dream Machine Pro Firmware No fix yet Fix from $2,3002023-02-23 HIGH 8.8 CVE-2023-23912 A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCP… Usg Firmware 2.0.9 / 4.4.57+ Fix from $1,9502023-02-09 MEDIUM 5.9 CVE-2023-23119 The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version… Af 2x Firmware 3.2.2+ Fix from $1,6002023-02-02