<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Ubiquiti, Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/ubiquiti" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Ubiquiti, Inc. (ubiquiti).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/ubiquiti.png</url>
      <title>Ubiquiti, Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-110459 · 8.6 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-110459</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-110459</guid>
      <description>A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 05:19:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-110458 · 3.7 LOW 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-110458</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-110458</guid>
      <description>A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device.</description>
      <category>Low</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 05:16:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-110457 · 3.7 LOW 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-110457</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-110457</guid>
      <description>A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.</description>
      <category>Low</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 05:12:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-110456 · 5.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-110456</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-110456</guid>
      <description>A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 05:06:56 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-110455 · 8.1 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-110455</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-110455</guid>
      <description>A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 05:00:58 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-110454 · 5.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-110454</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-110454</guid>
      <description>A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 04:54:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-95862 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-95862</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-95862</guid>
      <description>A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 22 Sep 2026 18:49:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-95861 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-95861</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-95861</guid>
      <description>A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 22 Sep 2026 18:47:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77558 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77558</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77558</guid>
      <description>A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 22 Sep 2026 18:43:14 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77556 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77556</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77556</guid>
      <description>A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 22 Sep 2026 18:41:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77555 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77555</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77555</guid>
      <description>A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 22 Sep 2026 18:38:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77544 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77544</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77544</guid>
      <description>A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 22 Sep 2026 18:34:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77532 · 8.8 HIGH</title>
      <link>https://vulnogram.org/CVE-2026-77532</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77532</guid>
      <description>A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.</description>
      <category>High</category>
      <pubDate>Wed, 26 Aug 2026 11:01:30 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77557 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77557</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77557</guid>
      <description>A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 10:53:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77554 · 10 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77554</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77554</guid>
      <description>A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 10:45:46 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77553 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77553</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77553</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 10:42:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77552 · 9.8 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77552</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77552</guid>
      <description>A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 10:40:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77551 · 9 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77551</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77551</guid>
      <description>A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 10:37:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77550 · 10 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77550</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77550</guid>
      <description>A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 10:33:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77549 · 9 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77549</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77549</guid>
      <description>A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instance…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 10:30:06 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77548 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77548</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77548</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 10:23:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77547 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77547</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77547</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 10:20:14 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77546 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77546</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77546</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 10:16:47 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77545 · 9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77545</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77545</guid>
      <description>A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 10:13:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77543 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77543</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77543</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 10:07:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77542 · 9.1 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77542</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77542</guid>
      <description>A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 10:01:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77541 · 9.1 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77541</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77541</guid>
      <description>A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 09:58:08 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77540 · 9.1 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77540</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77540</guid>
      <description>A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 09:53:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77539 · 9.1 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77539</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77539</guid>
      <description>A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 09:50:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77538 · 8.2 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77538</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77538</guid>
      <description>A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 09:47:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77537 · 10 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-77537</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77537</guid>
      <description>A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Aug 2026 09:39:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77536 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77536</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77536</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 09:35:38 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77535 · 9.1 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77535</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77535</guid>
      <description>A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 09:27:25 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77534 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77534</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77534</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 09:21:17 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77533 · 9.9 CRITICAL</title>
      <link>https://vulnogram.org/CVE-2026-77533</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77533</guid>
      <description>A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.</description>
      <category>Critical</category>
      <pubDate>Wed, 26 Aug 2026 08:57:33 GMT</pubDate>
    </item>
  </channel>
</rss>
