CVE-2024-27981: Ubiquiti UniFi Network Application

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device. Affected Products: UniFi Network Application (Version 8.0.28 and earlier) . Mitigation: Update UniFi Network Application to Version 8.1.113 or later.

Affected products

• Ubiquiti UniFi Network Application: before 8.1.113 (fixed in 8.1.113)
• Ubiquiti Inc UniFi Network Application: before 8.1.113 (fixed in 8.1.113)

Published 2024-04-04. Last modified 2026-06-17.