by Kastro
Paper/Archive/CVE-2026-22557

CVE-2026-22557

Ubiquiti Inc UniFi Network Application — A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to acces…

EPSS 28%CVSS 10.0
critical.is priorityof 100
50
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 98.1.981 × 2019.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.

Affected

ProductAffectedFixed inSource
UniFi Network Application10.1.89 – < 10.1.8910.1.89CNA
UniFi Network Application10.2.97 – < 10.2.9710.2.97CNA
UniFi Network Application9.0.118 – < 9.0.1189.0.118CNA

Scores by source

hackerone (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b