CVE-2025-23118: Ubiquiti Inc UniFi Protect Cameras

Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.

Affected products

• Ubiquiti Inc UniFi Protect Cameras: before 4.74.106 (fixed in 4.74.106)

Published 2025-03-01. Last modified 2026-06-17.