CVE Tools
Track your stack

Ubiquiti

7 CVEs tracked since 2023. Since Apr 2023, none of them reached CISA KEV.

Ubiquiti CVEs per month

Apr 2023 to Apr 2023. Point at a month, or focus the strip and use the arrow keys.
Ubiquiti CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0470

Products

The products that kept showing up in Ubiquiti's monthly top three, with their CVEs summed over those months.

  1. Edgerouter X71 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Ubiquiti.

  1. CVE-2019-25652UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM7.5
  2. CVE-2019-25651Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control8.3
  3. CVE-2024-45205An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) could allow a malicious actor with access to an adjacent netwo...7.1
  4. CVE-2024-37380A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point (Version 6.6.65 an...5.3
  5. CVE-2024-34786UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and...4.8
  6. CVE-2023-41721Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creatin...5.3
  7. CVE-2023-31998A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.7.5
  8. CVE-2023-32000A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an A...4.8
  9. CVE-2023-2379Ubiquiti EdgeRouter X Web Service denial of service7.5
  10. CVE-2023-2378Ubiquiti EdgeRouter X Web Management command injection7.2
  11. CVE-2023-2377Ubiquiti EdgeRouter X Web Management command injection7.2
  12. CVE-2023-2376Ubiquiti EdgeRouter X Web Management command injection7.2
  13. CVE-2023-2375Ubiquiti EdgeRouter X Web Management command injection7.2
  14. CVE-2023-2374Ubiquiti EdgeRouter X Web Management command injection7.2
  15. CVE-2023-2373Ubiquiti EdgeRouter X Web Management command injection7.2

The record

Peak rank
#96 in Apr 2023
Busiest month shown
Apr 2023, 7 CVEs
Months with a KEV entry
0 since Apr 2023
Monthly snapshots
1 since 2023
Ubiquiti's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store