Ubiquiti UniFi Vulnerability - Critical Account Hijacking Risk

The Flaw

Ubiquiti has recently addressed two serious vulnerabilities in its UniFi Network application. Among these, one flaw, tracked as CVE-2026-22557, has been rated with a maximum severity score of 10.0 on the CVSS scale. This flaw allows attackers on the same network to exploit a Path Traversal vulnerability, potentially leading to unauthorized access to user accounts. The vulnerability affects versions 10.1.85 and earlier of the UniFi Network app.

The second vulnerability, identified as CVE-2026-22558, has a CVSS score of 7.7. It is an Authenticated NoSQL Injection vulnerability that could allow a malicious actor with low privileges to escalate their access rights within the system. Both vulnerabilities were patched in version 10.1.89 and later, making it crucial for users to update their applications.

What's at Risk

The implications of these vulnerabilities are significant, especially for organizations relying on Ubiquiti's UniFi Network app to manage their networking devices. The software is widely used to control various hardware components, including Wi-Fi access points, switches, and gateways. If exploited, the Path Traversal flaw could enable attackers to manipulate files on the underlying system, leading to potential account takeovers and unauthorized access to sensitive data.

Organizations that do not update their software risk exposing their networks to attackers who could gain control over their systems. This could result in data breaches, loss of sensitive information, and disruption of services, making timely updates essential.

Patch Status

Ubiquiti has taken swift action to address these vulnerabilities by releasing patches in version 10.1.89 of the UniFi Network application. Users are strongly advised to upgrade to this version or later to mitigate the risks associated with these vulnerabilities. The company has provided detailed advisories outlining the vulnerabilities and the necessary steps for users to secure their systems.

Failure to update could leave systems vulnerable to exploitation, especially in environments where network security is paramount. Regularly checking for updates and applying them is a best practice that can significantly reduce the risk of cyber threats.

Immediate Actions

To protect against these vulnerabilities, users should take the following immediate actions:

• Update to the latest version of the UniFi Network application (10.1.89 or later).
• Review network access controls to limit unauthorized access.
• Monitor network activity for any unusual behavior that may indicate exploitation.

By following these steps, users can enhance their security posture and safeguard their networks against potential account hijacking and other malicious activities. Staying informed about vulnerabilities and applying patches promptly is crucial in today's cybersecurity landscape.