What is the CVSS score of EUVD-2026-14988?

EUVD-2026-14988 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Unifi Network Server are affected by EUVD-2026-14988?

Ubiquiti UniFi Network Server versions 10.1.85 and earlier contain a high-severity account takeover vulnerability exploitable through social engineering attacks, potentially enabling unauthorized…. A patch is available.

How to fix or mitigate EUVD-2026-14988?

Within 24 hours: Inventory all Ubiquiti UniFi Network Server deployments and identify systems running version 10.1.85 or earlier. Within 7 days: Apply vendor patch to upgrade to version 10.1.89 or later across all affected instances; conduct user awareness training on social engineering and suspicious link recognition. Within 30 days: Implement additional account monitoring controls, review access logs for unauthorized activity, and enforce multi-factor authentication for administrative accounts if not already deployed.

Unifi Network Server EUVD-2026-14988

| CVE-2026-22559 HIGH

Improper Input Validation (CWE-20)

2026-03-24 hackerone

GHSA-8m5g-mp2m-6hp8

Authentication Bypass Ubiquiti Unifi Network Server Ubiquiti Inc

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:17 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

10.1.89

EUVD ID Assigned

Mar 24, 2026 - 19:30 euvd

EUVD-2026-14988

Analysis Generated

Mar 24, 2026 - 19:30 vuln.today

CVE Published

Mar 24, 2026 - 19:05 nvd

HIGH 8.8

DescriptionCVE.org

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.

Affected Products: UniFi Network Server (Version 10.1.85 and earlier)

Mitigation: Update UniFi Network Server to Version 10.1.89 or later.

AnalysisAI

Ubiquiti UniFi Network Server versions 10.1.85 and earlier are vulnerable to account takeover through improper input validation when users click malicious links in social engineering attacks. An attacker can gain unauthorized account access with high impact on confidentiality, integrity, and availability. Users should upgrade to version 10.1.89 or later to remediate this vulnerability.

Technical ContextAI

This vulnerability affects Ubiquiti's UniFi Network Server (CPE: cpe:2.3:a:ubiquiti_inc:unifi_network_server:*:*:*:*:*:*:*:*), a centralized management platform for UniFi network devices including access points, switches, and security gateways. The flaw stems from improper input validation, where the application fails to adequately sanitize or validate user-supplied input in authentication or session management mechanisms. This weakness allows specially crafted malicious links to bypass authentication controls when processed by the server, enabling attackers to hijack user sessions or gain unauthorized access without proper credential verification. The vulnerability requires network accessibility (AV:N) and targets the web-based management interface that administrators use to configure and monitor UniFi network infrastructure.

RemediationAI

Immediately update UniFi Network Server to version 10.1.89 or later, as specified in the official mitigation guidance. The patch is available through Ubiquiti's standard update channels, and deployment instructions can be found in Security Advisory Bulletin 062 at https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b. As an interim measure until patching is completed, implement strict security awareness training emphasizing the risks of clicking unsolicited links, restrict network access to the UniFi Network Server management interface to trusted administrative IP ranges only, enable multi-factor authentication if available for additional account protection, and monitor authentication logs for suspicious access attempts or unusual session creation patterns. Organizations should prioritize this update for internet-facing UniFi Network Server deployments and those accessible from less-trusted network segments.