Ubiquiti vulnerabilities and fixes

CVEs that mention Ubiquiti, ranked by priority. 18 tracked.

Ubiquiti has 18 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 18. Most recent: 2026-07-02. Highest priority: CVE-2026-50746 (score 62/100).

• CVE-2026-50746 CRITICAL 10.0 UPGRADE A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U
• CVE-2026-50748 CRITICAL 9.9 UPGRADE A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul
• CVE-2026-54408 HIGH 8.6 UPGRADE A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U
• CVE-2026-55117 HIGH 8.6 UPGRADE A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Acces
• CVE-2026-50747 CRITICAL 9.9 UPGRADE A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL In
• CVE-2026-54407 HIGH 8.6 UPGRADE A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U
• CVE-2026-55115 CRITICAL 9.9 UPGRADE A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (S
• CVE-2026-54400 CRITICAL 9.1 UPGRADE A malicious actor with access to the network and high privileges could exploit an Improper Access Control vuln
• CVE-2026-54405 HIGH 7.5 UPGRADE A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in
• CVE-2026-54406 HIGH 8.7 UPGRADE A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability
• CVE-2026-55111 HIGH 7.5 UPGRADE A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Prote
• CVE-2026-55114 HIGH 8.8 UPGRADE A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulne
• CVE-2026-56841 HIGH 8.8 UPGRADE A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection v
• CVE-2026-55113 HIGH 7.5 UPGRADE A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability
• CVE-2026-55118 HIGH 8.3 UPGRADE A malicious actor with access to the network,low privileges and under certain conditions could exploit an Impr
• CVE-2026-54409 HIGH 7.5 UPGRADE A malicious actor with access to the network and under certain conditions could exploit an Improper Initializa
• CVE-2026-55119 HIGH 8.1 UPGRADE A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulne
• CVE-2026-56842 HIGH 7.5 UPGRADE A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authoriza

FAQ

How do I fix Ubiquiti vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Ubiquiti being exploited right now?

None of the tracked Ubiquiti CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Ubiquiti CVE should I patch first?

CVE-2026-50746 currently ranks highest (62/100): A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U.

← Back to latest CVEs