---
title: "Ubiquiti UniFi Network Application vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/ubiquiti/unifi-network-application
type: product
description: "Ubiquiti UniFi Network Application has 16 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2026-08-26
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Ubiquiti UniFi Network Application vulnerabilities

Vendor: [Ubiquiti](https://radicalnotion.ai/vendor/ubiquiti)

- **Published CVEs:** 16
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 13
- **Average CVSS:** 8.1
- **First CVE:** 2023-06-30
- **Latest CVE:** 2026-08-26

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 5 |
| High | 8 |
| Medium | 3 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 4 |
| [CWE-77](https://radicalnotion.ai/cwe/cwe-77) | Improper Neutralization of Special Elements used in a Command ('Command Injection') | 3 |
| [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 2 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 2 |
| [CWE-863](https://radicalnotion.ai/cwe/cwe-863) | Incorrect Authorization | 1 |
| [CWE-943](https://radicalnotion.ai/cwe/cwe-943) | Improper Neutralization of Special Elements in Data Query Logic | 1 |
| [CWE-276](https://radicalnotion.ai/cwe/cwe-276) | Incorrect Default Permissions | 1 |
| [CWE-287](https://radicalnotion.ai/cwe/cwe-287) | Improper Authentication | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2023 | 3 |
| 2024 | 3 |
| 2025 | 1 |
| 2026 | 9 |

## Affected versions (top 20 of 24)

| Version | Kind | CVEs |
| --- | --- | --- |
| \< 10.4.57 | range | 5 |
| \< 10.5.67 | range | 2 |
| 10.1.89 \<= v \< 10.1.89 | range | 2 |
| 10.2.97 \<= v \< 10.2.97 | range | 2 |
| 7.3.83 | range | 2 |
| 9.0.118 \<= v \< 9.0.118 | range | 2 |
| \< 8.1.113 | range | 1 |
| \<= 7.3.83 | range | 1 |
| \<= 7.5.176 | range | 1 |
| \<= 8.3.32 | range | 1 |
| \<= 8.4.62 | range | 1 |
| 7.5.176 | range | 1 |
| 10.4.57 | patched | 5 |
| 10.1.89 | patched | 2 |
| 10.2.97 | patched | 2 |
| 10.5.67 | patched | 2 |
| 9.0.118 | patched | 2 |
| 8.1.113 | patched | 1 |
| 8.4.59 | patched | 1 |
| 9.2.87 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-77541 | - | critical | 9.1 | No | No | Yes |
| CVE-2026-77535 | - | critical | 9.1 | No | No | Yes |
| CVE-2026-56842 | - | high | 7.5 | No | No | Yes |
| CVE-2026-55114 | - | high | 8.8 | No | No | Yes |
| CVE-2026-55118 | - | high | 8.3 | No | No | Yes |
| CVE-2026-54406 | - | high | 8.7 | No | No | Yes |
| CVE-2026-54405 | - | high | 7.5 | No | No | Yes |
| CVE-2026-22557 | - | critical | 10.0 | No | No | Yes |
| CVE-2026-22558 | - | high | 7.7 | No | No | Yes |
| CVE-2025-24292 | - | medium | 6.8 | No | No | Yes |
| CVE-2024-42028 | - | high | 8.8 | No | No | No |
| CVE-2024-42025 | - | high | 7.8 | No | No | Yes |
| CVE-2024-27981 | - | critical | 9.8 | No | No | Yes |
| CVE-2023-41721 | - | medium | 5.3 | No | No | No |
| CVE-2023-32000 | - | medium | 4.8 | No | No | No |
| CVE-2023-28365 | - | critical | 9.1 | No | No | Yes |

## Frequently asked questions

### How many CVEs does Ubiquiti UniFi Network Application have?

Ubiquiti UniFi Network Application has 16 published CVE records since 2023.

### How many Ubiquiti UniFi Network Application CVEs are in CISA KEV?

None of Ubiquiti UniFi Network Application's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Ubiquiti UniFi Network Application vulnerabilities?

No Ubiquiti UniFi Network Application CVEs currently have a tracked public exploit in this dataset.

### Which versions of Ubiquiti UniFi Network Application are affected?

24 distinct Ubiquiti UniFi Network Application versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Ubiquiti UniFi Network Application CVEs?

Ubiquiti UniFi Network Application's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation).

### How many critical Ubiquiti UniFi Network Application vulnerabilities are there?

Ubiquiti UniFi Network Application has 5 critical and 8 high-severity CVEs.

### What is the average severity of Ubiquiti UniFi Network Application CVEs?

The average CVSS base score across Ubiquiti UniFi Network Application's scored CVEs is 8.1.

## Other products from this vendor

- [Express 7](https://radicalnotion.ai/vendor/ubiquiti/express-7) (25 CVEs)
- [UniFi OS Server](https://radicalnotion.ai/vendor/ubiquiti/unifi-os-server) (20 CVEs)
- [Cloud Gateways](https://radicalnotion.ai/vendor/ubiquiti/cloud-gateways) (18 CVEs)
- [Dream Machines](https://radicalnotion.ai/vendor/ubiquiti/dream-machines) (18 CVEs)
- [Dream Routers](https://radicalnotion.ai/vendor/ubiquiti/dream-routers) (18 CVEs)
- [Dream Wall](https://radicalnotion.ai/vendor/ubiquiti/dream-wall) (18 CVEs)
- [EdgeRouter X](https://radicalnotion.ai/vendor/ubiquiti/edgerouter-x) (14 CVEs)
- [Express](https://radicalnotion.ai/vendor/ubiquiti/express) (12 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ubiquiti/unifi-network-application). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.