EUVD-2026-66383Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Network-reachable command injection needs pre-existing high privileges (PR:H) but no interaction (UI:N); command execution escapes the agent to the host (S:C) yielding full C/I/A loss.
Primary rating from Vendor (Ubiquiti).
CVSS VectorVendor: Ubiquiti
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.
AnalysisAI
Command injection in Ubiquiti's UID Enterprise Agent lets a high-privileged, network-adjacent actor run arbitrary OS commands on the host device by supplying improperly validated input. The flaw carries a CVSS 9.1 rating driven by a scope change and full compromise of confidentiality, integrity, and availability, though exploitation requires existing high privileges (PR:H). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to already possess high privileges (CVSS PR:H) and network access (AV:N) to the UID Enterprise Agent; it is therefore not remotely exploitable by an unauthenticated actor against a default install. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are partially conflicting: the CVSS base score of 9.1 is high, but the network attack vector (AV:N) is gated by a high-privilege requirement (PR:H), meaning an attacker must already hold elevated access before exploiting the flaw - this substantially narrows the realistic threat population to insiders, compromised admin credentials, or post-exploitation lateral movement rather than opportunistic internet-wide attacks. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has already obtained high-privilege access to the UID Enterprise Agent - for example via stolen admin credentials or from an adjacent compromised system - sends crafted input over the network to the agent, which fails to validate it and passes it to a host command. The injected command executes on the host device with the agent's privileges, giving the attacker full control and a pivot point into the environment. … |
| Remediation | Patch available per vendor advisory - upgrade UID Enterprise Agent to the fixed release identified in Ubiquiti Security Advisory Bulletin 067 (https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9); the exact fixed version was not provided in the input and should be confirmed from that advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify all Ubiquiti UID Enterprise Agent deployments in your environment and immediately restrict network access to trusted administrative networks only-disable external management access and implement firewall rules limiting connectivity to known administrative subnets. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Uid Enterprise Agent
View allSame weakness CWE-20 – Improper Input Validation
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today