7.7 High
CVE-2026-22558
Ubiquiti Inc UniFi Network Application vulnerability
Ubiquiti IncUniFi Network Application
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 47% of scored CVEs
SeverityCVSS
7.7High
Description NVD
An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.
Coverage 1 article · 1 outlet
- Critical Ubiquiti UniFi UniFi security flaw allows potential account hijackingSecurity Affairs · first in our coverage · mentions it in passing