Ubiquiti Inc UniFi Protect Cameras vulnerabilities

5 CVEs affecting Ubiquiti Inc UniFi Protect Cameras, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23123, published 2025-05-19.

More from Ubiquiti Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-23123, published 2025-05-19. Critical severity, CVSS 10.0. EPSS: 1.2% chance of exploitation in the next 30 days. A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43…
• CVE-2025-23115, published 2025-03-01. Critical severity, CVSS 9.0. EPSS: 0.7% chance of exploitation in the next 30 days. A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network.
• CVE-2025-23119, published 2025-03-01. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent…
• CVE-2025-23117, published 2025-03-01. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera…
• CVE-2025-23118, published 2025-03-01. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.