Ubiquiti vulnerabilities

CVEs per yearBy the year they were published

1. 202313
2. 20243
3. 20262

Newest CVEs

• CVE-2019-25652

  UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM

  Ubiquiti · UniFi Network Controller

  High7.7
• CVE-2019-25651

  Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control

  Ubiquiti · UniFi Network Controller

  Critical9.0
• CVE-2024-45205

  An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) could allow a malicious…

  Ubiquiti · UniFi iOS App

  High7.1
• CVE-2024-37380

  A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi…

  Ubiquiti · UniFi U6+ Access Point

  Medium5.3
• CVE-2024-34786

  UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that…

  Ubiquiti · UniFi iOS App

  Medium4.8
• CVE-2023-41721

  Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with…

  Ubiquiti · UniFi Network Application

  Critical10.0
• CVE-2023-31998

  A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.

  Ubiquiti · EdgeRouter

  Medium5.9
• CVE-2023-32000

  A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to…

  Ubiquiti · UniFi Network Application

  Medium4.8
• CVE-2023-2379

  Ubiquiti EdgeRouter X Web Service denial of service

  Ubiquiti · EdgeRouter X

  High7.5
• CVE-2023-2378

  Ubiquiti EdgeRouter X Web Management command injection

  Ubiquiti · EdgeRouter X

  High8.6