EUVD-2026-41380
GHSA-j2cq-vphm-g3w3
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach UniFi controller over network
-
DeliverySend crafted malformed request
-
ExploitTrigger improper input validation flaw
-
ExecutionCrash or hang application process
-
ImpactManagement controller unavailable (DoS)
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Exploitation Conditions | Exploitation requires network access to the UniFi Network Application's listening service; per the CVSS vector (AV:N/AC:L/PR:N/UI:N) no authentication and no user interaction are needed, so any actor able to route packets to the controller can attempt it against default configurations. The primary limiting factor is network reachability - controllers that are firewalled, segmented, or VPN-gated are only exposed to attackers on trusted networks - and the impact is bounded to denial of service (A:H, with C:N/I:N), meaning no data or code-execution consequences constrain what the attacker gains. The specific malformed input structure is not detailed in the provided description beyond it being an improper-input-validation condition. |
| Impact | The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) describes a low-complexity, network-reachable, unauthenticated attack requiring no user interaction, but the impact is strictly availability - there is no data exposure or code execution. This makes it a genuine operational-disruption risk rather than a system-compromise risk. No EPSS score, SSVC decision data, or POC availability was provided in the input, so exploitation probability cannot be quantified from the given signals; absence of a KEV listing indicates no confirmed active exploitation. The realistic priority is moderate: easy to trigger and unauthenticated, but capped at knocking the management application offline, which degrades network administration and monitoring rather than breaching data. Because the CPE version is a wildcard, the exact fixed version is not machine-readable from the input and should be confirmed against the vendor advisory. |
| Exploit ScenarioDerived | An attacker who can reach the UniFi Network Application over the network sends a crafted, malformed request that the application fails to validate, causing the process to crash or hang and taking the management controller offline. Repeating the request keeps the controller unavailable, disrupting monitoring and administration of the managed UniFi fleet. No public proof-of-concept is identified in the available data, and the low attack complexity with no authentication means the barrier to execution is minimal once network access is obtained. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 02, 2026
Denial of service in Ubiquiti's UniFi Network Application allows a remote, unauthenticated attacker with network access to crash or render the application unavailable by sending malformed input that the application fails to properly validate (CWE-20). The flaw carries a CVSS 7.5 rating driven entirely by availability impact (C:N/I:N/A:H), with no confidentiality or integrity consequences. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
RemediationAI
Upgrade UniFi Network Application to the fixed release identified in Ubiquiti Security Advisory Bulletin 066-066 (https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc); the exact patched version number is not specified in the available data and should be taken directly from that advisory. As this is a network-reachable DoS, the most effective compensating control until patching is to restrict network exposure of the controller: place the UniFi Network Application management interfaces behind a firewall or VPN and limit inbound access to trusted management networks and known UniFi device subnets only, which reduces the attacker population at the cost of requiring VPN/segmentation for remote admin access. Because impact is limited to availability, monitoring the controller process for crashes and configuring automatic restart/watchdog behavior can shorten outage windows, though it does not prevent repeated triggering.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
UniFi Network Application is Ubiquiti's centralized controller software for managing UniFi network infrastructure (access points, switches, gateways). The affected component is identified by CPE cpe:2.3:a:ubiquiti_inc:unifi_network_application, and all versions prior to the patched release are implicated (the CPE version field is a wildcard). The root cause is CWE-20 (Improper Input Validation): the application accepts network-supplied data without adequately checking its structure, type, or bounds, allowing crafted input to drive the process into an unrecoverable or crashing state. Because the controller typically listens on the network for device and administrative traffic, the input-handling path is reachable remotely.
Know when Unifi Network Application gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-reachable, unauthenticated, low-complexity input-validation flaw with no user interaction; impact is availability-only (process crash), so C:N/I:N/A:H and scope unchanged.
Primary rating from Vendor (hackerone).
CVSS VectorVendor: hackerone
Lifecycle Timeline
1DescriptionCVE.org
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.
Executive ViewAI
Ubiquiti's UniFi Network Application is vulnerable to denial-of-service attacks that could render network management capabilities unavailable for affected organizations. The vulnerability is remotely exploitable without authentication over network access, potentially impacting any organization running this application within the exposed network segment.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Network segmentation to limit access to UniFi Network Application from trusted administrative systems only; (2) Deploy reverse proxy or WAF in front of the application to validate and sanitize input; (3) Implement rate limiting on the management interface; (4) Maintain redundant network management access channels.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Unifi Network Application
View allA critical path traversal vulnerability exists in the UniFi Network Application that allows unauthenticated remote attac
Authenticated command injection in Ubiquiti's UniFi Network Application (the controller software managing UniFi network
Privilege escalation in Ubiquiti's UniFi Network Application allows an already-authenticated, high-privileged user with
A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems
Privilege escalation in Ubiquiti's UniFi Network Application allows a low-privileged, network-adjacent user to gain elev
Privilege escalation via path traversal in self-hosted UniFi Network Application (Ubiquiti's controller software) allows
Privilege escalation in Ubiquiti's UniFi Network Application allows a low-privileged, authenticated user on the network
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (V
Privilege persistence in Ubiquiti's UniFi Network Application allows a low-privileged network-adjacent actor to retain g
Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. Rated
A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor
Exploit-DB