Ubiquiti Inc UniFi Access Intercom vulnerabilities

2 CVEs affecting Ubiquiti Inc UniFi Access Intercom, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-27212, published 2025-08-04.

More from Ubiquiti Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-27212, published 2025-08-04. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network. Affected Products: UniFi…
• CVE-2024-29206, published 2024-05-07. Low severity, CVSS 2.2. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) and make unsupported changes to the system. Affected Products: UniFi…