CVE-2025-23123: Ubiquiti Inc UniFi Protect Cameras

Critical severity, CVSS 10.0. EPSS: 1.1% chance of exploitation in the next 30 days.

A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43 and earlier) firmware.

Affected products

• Ubiquiti Inc UniFi Protect Cameras: before 4.75.62 (fixed in 4.75.62)

Published 2025-05-19. Last modified 2026-06-17.