CVE-2025-27211: Ubiquiti Inc Edgemax Edgeswitch

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.

Affected products

• Ubiquiti Inc Edgemax Edgeswitch: before 1.11.0 (fixed in 1.11.0); from 1.11.0

Published 2025-08-04. Last modified 2026-06-17.