What is the CVSS score of CVE-2026-22557?

CVE-2026-22557 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ubiquiti are affected by CVE-2026-22557?

A critical, unpatched vulnerability in UniFi Network Application enables unauthenticated attackers to access and modify arbitrary files, potentially compromising network infrastructure and user…

Is there a public PoC exploit available for CVE-2026-22557?

Yes, a public proof-of-concept exploit is available for CVE-2026-22557. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-22557?

Within 24 hours: Inventory all UniFi Network Application deployments and assess exposure; isolate critical instances from untrusted networks if possible. Within 7 days: Implement network-level compensating controls (WAF rules, segmentation, access restrictions); contact Ubiquiti for patch availability timeline and workarounds. Within 30 days: Develop and execute migration or upgrade strategy; monitor for indicators of compromise; consider alternative network management solutions if patches remain unavailable.

Ubiquiti CVE-2026-22557

CRITICAL

Path Traversal (CWE-22)

2026-03-19 hackerone

Path Traversal Ubiquiti

10.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 19, 2026 - 14:45 vuln.today

CVE Published

Mar 19, 2026 - 14:24 nvd

CRITICAL 10.0

DescriptionCVE.org

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.

AnalysisAI

A critical path traversal vulnerability exists in the UniFi Network Application that allows unauthenticated remote attackers to access arbitrary files on the underlying system and manipulate them to gain account access. This vulnerability affects Ubiquiti's UniFi Network Application with a maximum CVSS score of 10.0, indicating critical severity with network-based exploitation requiring no user interaction or privileges. The vulnerability was reported through HackerOne, suggesting responsible disclosure, though current exploitation status in the wild is not confirmed.

Technical ContextAI

This is a path traversal vulnerability (also known as directory traversal) affecting the UniFi Network Application from Ubiquiti Inc. The affected product is identified via CPE string cpe:2.3:a:ubiquiti_inc:unifi_network_application. Path traversal vulnerabilities typically occur when applications fail to properly sanitize user-supplied input used in file path operations, allowing attackers to use sequences like '../' to navigate outside intended directories and access sensitive system files. In this case, the vulnerability is particularly severe because accessed files can be manipulated to compromise underlying system accounts, suggesting the application may process configuration files, authentication databases, or other security-critical resources without adequate access controls.

RemediationAI

Administrators should immediately consult Ubiquiti's Security Advisory Bulletin 062 available at https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b for specific patching instructions and updated versions that address this vulnerability. Given the critical nature and network-based attack vector, patching should be prioritized as an emergency maintenance activity. Until patches can be applied, organizations should implement network-level controls to restrict access to the UniFi Network Application management interface to trusted administrative networks only, using firewall rules or VPN requirements. Consider placing the application behind a reverse proxy or web application firewall configured to detect and block path traversal attempts, and monitor access logs for suspicious file access patterns or traversal sequences.