--- title: "Ubiquiti CNA report card" url: https://radicalnotion.ai/cna/ubiquiti type: cna description: "Ubiquiti is a CVE Numbering Authority with 42 published CVEs. Data-quality grade A, overall record completeness 100%." updated: 2026-10-29 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Ubiquiti: CNA report card - **Grade:** A - **Activity:** Active - **Published CVEs:** 42 - **CVEs in the last two years:** 42 - **In CISA KEV:** 0 - **Years active:** 0.2 - **Rank by CVE volume:** 234 of 430 - **Average CVSS:** 8.4 - **Distinct vendors:** 1 - **First CVE:** 2026-08-26 - **Latest CVE:** 2026-10-29 ## Record completeness | Field | Share of records filled | | --- | --- | | Overall | 100% | | Vendor | 100% | | Product | 100% | | CVSS | 100% | | CWE | 100% | ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 21 | | High | 16 | | Medium | 3 | | Low | 2 | | Unscored | 0 | ## Top vendors | Vendor | CVEs | | --- | --- | | [Ubiquiti](https://radicalnotion.ai/vendor/ubiquiti) | 42 | ## Top products | Product | CVEs | | --- | --- | | Express 7 | 11 | | Dream Machines | 11 | | Cloud Gateways | 11 | | Dream Routers | 11 | | Dream Wall | 11 | | Express | 8 | | UniFi OS Server | 7 | | UniFi Protect AI Key | 7 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 13 | | [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 11 | | [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 3 | | [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 2 | | [CWE-93](https://radicalnotion.ai/cwe/cwe-93) | Improper Neutralization of CRLF Sequences ('CRLF Injection') | 2 | | [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery (CSRF) | 2 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2 | | [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 2 | ## CVEs published by year | Year | CVEs published | | --- | --- | | 2026 | 42 | ## Latest CVEs | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-119251 | - | medium | 6.7 | 0.2% | No | 2026-10-29 | | CVE-2026-119250 | - | high | 7.8 | 0.3% | No | 2026-10-29 | | CVE-2026-119249 | - | high | 7.5 | 0.3% | No | 2026-10-29 | | CVE-2026-116839 | - | high | 7.1 | 0.1% | No | 2026-10-27 | | CVE-2026-116838 | - | high | 8.8 | 0.4% | No | 2026-10-27 | | CVE-2026-116837 | - | high | 8.8 | 0.2% | No | 2026-10-27 | | CVE-2026-116836 | - | high | 8.8 | 0.2% | No | 2026-10-27 | | CVE-2026-110459 | - | high | 8.6 | 0.3% | No | 2026-10-14 | | CVE-2026-110458 | - | low | 3.7 | 0.3% | No | 2026-10-14 | | CVE-2026-110457 | - | low | 3.7 | 0.3% | No | 2026-10-14 | | CVE-2026-110456 | - | medium | 5.3 | 0.3% | No | 2026-10-14 | | CVE-2026-110455 | - | high | 8.1 | 1.2% | No | 2026-10-14 | ## Frequently asked questions ### What is the Ubiquiti CNA? Ubiquiti is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 42 CVE records since 2026. ### How many CVEs has Ubiquiti published? Ubiquiti has published 42 CVE records, including 42 in the last two years. ### What is Ubiquiti's CVE data quality grade? RadicalNotion.AI grades Ubiquiti's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information. ### What products does Ubiquiti publish CVEs for? Ubiquiti most frequently publishes CVEs for Express 7, Dream Machines, Cloud Gateways, Dream Routers, Dream Wall. ### Which vendors does Ubiquiti cover? Ubiquiti publishes CVEs across 1 distinct vendors, most often Ubiquiti. ### Is Ubiquiti actively publishing CVEs? Ubiquiti is currently active, based on 42 CVEs in the last two years. ### What is the average severity of Ubiquiti's CVEs? The average CVSS base score across Ubiquiti's scored CVEs is 8.4. ### How many critical CVEs has Ubiquiti published? Ubiquiti has published 21 critical-severity CVEs and 16 high-severity CVEs. ### Are any of Ubiquiti's CVEs in CISA's Known Exploited Vulnerabilities catalog? No. None of Ubiquiti's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog. ### What are the most common weakness types in Ubiquiti's CVEs? Ubiquiti's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-284 (Improper Access Control), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read). ### How does Ubiquiti rank among CNAs? By total CVE volume, Ubiquiti ranks #234 of 430 CNAs, and it reports more complete CVE records than 55% of all CNAs. ## Peer CNAs - [Mitre](https://radicalnotion.ai/cna/mitre) (grade F, 115,570 CVEs) - [GitHub M](https://radicalnotion.ai/cna/github-m) (grade A, 22,387 CVEs) - [Patchstack](https://radicalnotion.ai/cna/patchstack) (grade A, 19,319 CVEs) - [Linux](https://radicalnotion.ai/cna/linux) (grade D, 18,205 CVEs) - [VulDB](https://radicalnotion.ai/cna/vuldb) (grade A, 17,858 CVEs) - [Microsoft](https://radicalnotion.ai/cna/microsoft) (grade D, 15,956 CVEs) - [Oracle](https://radicalnotion.ai/cna/oracle) (grade D, 12,397 CVEs) - [Redhat](https://radicalnotion.ai/cna/redhat) (grade F, 12,029 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/cna/ubiquiti). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.