UI UniFi Network Application vulnerabilities

9 CVEs affecting UI UniFi Network Application, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-56842, published 2026-07-02.

More from UI.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-28365, published 2023-07-01. Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days. A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host…
• CVE-2024-42025, published 2024-09-13. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with unifi user shell…
• CVE-2023-41721, published 2023-10-25. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating…
• CVE-2026-54406, published 2026-07-02. High severity, CVSS 8.7. EPSS: 0.6% chance of exploitation in the next 30 days. A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission…
• CVE-2026-54405, published 2026-07-02. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.
• CVE-2026-55114, published 2026-07-02. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi…
• CVE-2026-55118, published 2026-07-02. High severity, CVSS 8.3. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate…
• CVE-2026-56842, published 2026-07-02. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi…
• CVE-2023-32000, published 2023-07-08. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an…