Unifi Network Application
CVE-2026-22557
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
AnalysisAI
A critical path traversal vulnerability exists in the UniFi Network Application that allows unauthenticated remote attackers to access arbitrary files on the underlying system and manipulate them to gain account access. This vulnerability affects Ubiquiti's UniFi Network Application with a maximum CVSS score of 10.0, indicating critical severity with network-based exploitation requiring no user interaction or privileges. The vulnerability was reported through HackerOne, suggesting responsible disclosure, though current exploitation status in the wild is not confirmed.
Technical ContextAI
This is a path traversal vulnerability (also known as directory traversal) affecting the UniFi Network Application from Ubiquiti Inc. The affected product is identified via CPE string cpe:2.3:a:ubiquiti_inc:unifi_network_application. Path traversal vulnerabilities typically occur when applications fail to properly sanitize user-supplied input used in file path operations, allowing attackers to use sequences like '../' to navigate outside intended directories and access sensitive system files. In this case, the vulnerability is particularly severe because accessed files can be manipulated to compromise underlying system accounts, suggesting the application may process configuration files, authentication databases, or other security-critical resources without adequate access controls.
RemediationAI
Administrators should immediately consult Ubiquiti's Security Advisory Bulletin 062 available at https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b for specific patching instructions and updated versions that address this vulnerability. Given the critical nature and network-based attack vector, patching should be prioritized as an emergency maintenance activity. Until patches can be applied, organizations should implement network-level controls to restrict access to the UniFi Network Application management interface to trusted administrative networks only, using firewall rules or VPN requirements. Consider placing the application behind a reverse proxy or web application firewall configured to detect and block path traversal attempts, and monitor access logs for suspicious file access patterns or traversal sequences.
More in Unifi Network Application
View allAuthenticated command injection in Ubiquiti's UniFi Network Application (the controller software managing UniFi network
Privilege escalation in Ubiquiti's UniFi Network Application allows an already-authenticated, high-privileged user with
A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems
Privilege escalation in Ubiquiti's UniFi Network Application allows a low-privileged, network-adjacent user to gain elev
Privilege escalation via path traversal in self-hosted UniFi Network Application (Ubiquiti's controller software) allows
Privilege escalation in Ubiquiti's UniFi Network Application allows a low-privileged, authenticated user on the network
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (V
Privilege persistence in Ubiquiti's UniFi Network Application allows a low-privileged network-adjacent actor to retain g
Denial of service in Ubiquiti's UniFi Network Application allows a remote, unauthenticated attacker with network access
Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. Rated
A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today