Ubiquiti Inc UniFi Protect Application vulnerabilities

5 CVEs affecting Ubiquiti Inc UniFi Protect Application, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-77548, published 2026-08-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-77537, published 2026-08-26. Critical severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days. A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-77548, published 2026-08-26. Critical severity, CVSS 9.9. EPSS: 1.4% chance of exploitation in the next 30 days. A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host…
CVE-2026-77533, published 2026-08-26. Critical severity, CVSS 9.9. EPSS: 1.4% chance of exploitation in the next 30 days. A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host…
CVE-2025-23116, published 2025-03-01. Critical severity, CVSS 9.6. EPSS: 0.5% chance of exploitation in the next 30 days. An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take…
CVE-2025-23164, published 2025-05-19. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding…