CVE-2023-28365: UI UniFi Network Application

Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.

Affected products

• UI UniFi Network Application: before 7.4.156 (fixed in 7.4.156)

Published 2023-07-01. Last modified 2026-06-17.