CVE-2025-48979: Ubiquiti Inc Uisp Application

Low severity, CVSS 3.4. EPSS: 0.4% chance of exploitation in the next 30 days.

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.

Affected products

• Ubiquiti Inc Uisp Application: before 2.4.220 (fixed in 2.4.220)

Published 2025-08-29. Last modified 2026-06-17.