CVE-2025-27217: Ubiquiti Inc Uisp Application

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.

Affected products

• Ubiquiti Inc Uisp Application: before 2.4.220 (fixed in 2.4.220)

Published 2025-08-21. Last modified 2026-06-17.