Unifi Connect Application
Monthly
Privilege escalation in Ubiquiti's UniFi Connect Application allows network-accessible unauthenticated attackers to elevate their access level within the application via an Improper Access Control flaw. The vulnerability, tagged as an authentication bypass, exposes access control management infrastructure to unauthorized privilege acquisition with no user interaction or prior credentials required. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low-complexity network attack vector and PR:N classification make this a straightforward target for opportunistic exploitation.
Improper access control in Ubiquiti's UniFi Connect Application allows a network-adjacent attacker to bypass authentication and inject arbitrary operating-system commands on the underlying host, yielding full compromise (CVSS 10.0). The flaw chains an access-control weakness (CWE-284) with command injection, so an unauthenticated attacker reachable on the network can execute code with the application's privileges and pivot beyond the app boundary (scope change). No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV; EPSS data was not provided.
Privilege escalation in Ubiquiti's UniFi Connect Application allows network-accessible unauthenticated attackers to elevate their access level within the application via an Improper Access Control flaw. The vulnerability, tagged as an authentication bypass, exposes access control management infrastructure to unauthorized privilege acquisition with no user interaction or prior credentials required. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low-complexity network attack vector and PR:N classification make this a straightforward target for opportunistic exploitation.
Improper access control in Ubiquiti's UniFi Connect Application allows a network-adjacent attacker to bypass authentication and inject arbitrary operating-system commands on the underlying host, yielding full compromise (CVSS 10.0). The flaw chains an access-control weakness (CWE-284) with command injection, so an unauthenticated attacker reachable on the network can execute code with the application's privileges and pivot beyond the app boundary (scope change). No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV; EPSS data was not provided.