--- title: "Ubiquiti vulnerabilities: CVEs, CISA KEV and security advisories" url: https://radicalnotion.ai/vendor/ubiquiti type: vendor description: "Ubiquiti has 154 published CVEs, 4 in CISA KEV and 15 with public exploits." updated: 2026-10-29 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Ubiquiti vulnerabilities - **Published CVEs:** 154 - **In CISA KEV:** 4 - **With a public exploit:** 15 - **With a patch:** 133 - **Average CVSS:** 8.3 - **CVEs in the last two years:** 117 - **First CVE:** 2017-01-23 - **Latest CVE:** 2026-10-29 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 61 | | High | 71 | | Medium | 17 | | Low | 5 | | Unscored | 0 | ## Most affected products | Product | CVEs | | --- | --- | | [Express 7](https://radicalnotion.ai/vendor/ubiquiti/express-7) | 25 | | [UniFi OS Server](https://radicalnotion.ai/vendor/ubiquiti/unifi-os-server) | 20 | | [Dream Routers](https://radicalnotion.ai/vendor/ubiquiti/dream-routers) | 18 | | [Dream Machines](https://radicalnotion.ai/vendor/ubiquiti/dream-machines) | 18 | | [Cloud Gateways](https://radicalnotion.ai/vendor/ubiquiti/cloud-gateways) | 18 | | [Dream Wall](https://radicalnotion.ai/vendor/ubiquiti/dream-wall) | 18 | | [UniFi Network application](https://radicalnotion.ai/vendor/ubiquiti/unifi-network-application) | 16 | | [EdgeRouter X](https://radicalnotion.ai/vendor/ubiquiti/edgerouter-x) | 14 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 31 | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 27 | | [CWE-77](https://radicalnotion.ai/cwe/cwe-77) | Improper Neutralization of Special Elements used in a Command ('Command Injection') | 20 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 11 | | [CWE-295](https://radicalnotion.ai/cwe/cwe-295) | Improper Certificate Validation | 4 | | [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery (CSRF) | 4 | | [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 4 | | [CWE-918](https://radicalnotion.ai/cwe/cwe-918) | Server-Side Request Forgery (SSRF) | 4 | ## Assigning CNAs | CNA | CVEs | | --- | --- | | [hackerone](https://radicalnotion.ai/cna/hackerone) | 96 | | [Ubiquiti](https://radicalnotion.ai/cna/ubiquiti) | 42 | | [VulDB](https://radicalnotion.ai/cna/vuldb) | 10 | | [mitre](https://radicalnotion.ai/cna/mitre) | 3 | | [VulnCheck](https://radicalnotion.ai/cna/vulncheck) | 3 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2019 | 4 | | 2020 | 0 | | 2021 | 0 | | 2022 | 0 | | 2023 | 17 | | 2024 | 11 | | 2025 | 23 | | 2026 | 94 | ## Latest CVEs | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-119251 | - | medium | 6.7 | 0.2% | No | 2026-10-29 | | CVE-2026-119250 | - | high | 7.8 | 0.3% | No | 2026-10-29 | | CVE-2026-119249 | - | high | 7.5 | 0.3% | No | 2026-10-29 | | CVE-2026-116839 | - | high | 7.1 | 0.1% | No | 2026-10-27 | | CVE-2026-116838 | - | high | 8.8 | 0.4% | No | 2026-10-27 | | CVE-2026-116837 | - | high | 8.8 | 0.2% | No | 2026-10-27 | | CVE-2026-116836 | - | high | 8.8 | 0.2% | No | 2026-10-27 | | CVE-2026-110459 | - | high | 8.6 | 0.3% | No | 2026-10-14 | | CVE-2026-110458 | - | low | 3.7 | 0.3% | No | 2026-10-14 | | CVE-2026-110457 | - | low | 3.7 | 0.3% | No | 2026-10-14 | | CVE-2026-110456 | - | medium | 5.3 | 0.3% | No | 2026-10-14 | | CVE-2026-110455 | - | high | 8.1 | 1.2% | No | 2026-10-14 | ## Frequently asked questions ### How many CVEs does Ubiquiti have? Ubiquiti has 154 published CVE records since 2017, including 117 in the last two years. ### How many Ubiquiti CVEs are in CISA KEV? 4 of Ubiquiti's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline. ### Which Ubiquiti products have the most CVEs? The Ubiquiti products with the most published CVEs are Express 7, UniFi OS Server, Dream Routers, Dream Machines, Cloud Gateways. ### What are the most common weakness types in Ubiquiti CVEs? Ubiquiti's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-20 (Improper Input Validation), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')). ### Are there public exploits for Ubiquiti vulnerabilities? Yes — 15 of Ubiquiti's CVEs have a known public exploit. ### How many critical Ubiquiti vulnerabilities are there? Ubiquiti has 61 critical and 71 high-severity CVEs. ### What is the average severity of Ubiquiti CVEs? The average CVSS base score across Ubiquiti's scored CVEs is 8.3. ## Related vendors - [axiosys](https://radicalnotion.ai/vendor/axiosys) (156 CVEs) - [ThimPress](https://radicalnotion.ai/vendor/thimpress) (156 CVEs) - [Zimbra](https://radicalnotion.ai/vendor/zimbra) (155 CVEs) - [Prestashop](https://radicalnotion.ai/vendor/prestashop) (155 CVEs) - [Mitel](https://radicalnotion.ai/vendor/mitel) (153 CVEs) - [Squid Cache](https://radicalnotion.ai/vendor/squid-cache) (153 CVEs) - [10Web](https://radicalnotion.ai/vendor/10web) (152 CVEs) - [FlowiseAI](https://radicalnotion.ai/vendor/flowiseai) (152 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ubiquiti). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.