Ubiquiti - Critical Vulnerabilities in UniFi Patched

The Flaw

Ubiquiti has recently addressed two critical vulnerabilities in its UniFi Network Application, a software used for managing networking hardware. The most severe of these vulnerabilities is tracked as CVE-2026-22557. This path traversal flaw allows unauthenticated attackers to access sensitive files on targeted devices. Such access could potentially lead to user account hijacking with minimal effort required from the attacker.

In addition to the path traversal issue, Ubiquiti also patched an authenticated NoSQL injection flaw. This vulnerability enables authenticated users to escalate their privileges, further compromising the application's security. Both vulnerabilities pose significant risks to network configurations and sensitive data, making it crucial for users to take immediate action.

What's at Risk

The vulnerabilities affect versions 10.1.85 and earlier of the UniFi Network Application. If exploited, these flaws could allow attackers to gain unauthorized access to sensitive network configurations. This could lead to data breaches, unauthorized changes to network settings, and potentially severe disruptions to network operations.

Organizations using Ubiquiti's UniFi Network Application should be particularly vigilant. The combination of unauthenticated access and privilege escalation creates a dangerous scenario for any organization relying on this software for network management.

Patch Status

Ubiquiti has released patches to address these vulnerabilities, and it is essential for users to update their applications to the latest version. Ensuring that the software is up to date is the first line of defense against potential exploitation. Users should check their current version and apply the necessary updates as soon as possible.

Failing to patch these vulnerabilities not only puts individual networks at risk but also exposes organizations to potential legal and compliance issues related to data breaches.

Immediate Actions

To protect your network, follow these steps:

1. Update your UniFi Network Application to the latest version immediately.
2. Review your network configurations and user access levels to ensure no unauthorized changes have been made.
3. Monitor network activity for any unusual behavior that may indicate exploitation attempts.

By taking these actions, users can significantly reduce the risk posed by these critical vulnerabilities and safeguard their network environments against potential threats.