Ubiquiti Networks

Ubiquiti Networks, a major provider of networking and wireless infrastructure equipment, has a high-severity vulnerability (CVSS 8.8) that can be exploited locally over an adjacent network without authentication, allowing attackers to gain complete control over confidentiality, integrity, and availability. The vulnerability requires physical or network proximity but poses critical risk to organizations relying on Ubiquiti equipment in their infrastructure. Security teams should monitor for patches expected by the July 2025 deadline and prioritize testing updates for Ubiquiti devices, particularly those in sensitive network segments.