CVE-2016-6914: UI UniFi Video

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local users to gain SYSTEM privileges via a Trojan horse taskkill.exe file.

Affected products

• UI UniFi Video: before 3.8.0 (fixed in 3.8.0)

Published 2017-12-27. Last modified 2026-06-17.