CVE-2026-22557
CRITICALUbiquiti INC Unifi Network Application < 10.1.89 - Path Traversal
Title source: ruleDescription
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
Exploits (4)
github
FAILED
4 stars
by adminlove520 · pythonpoc
https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2026/CVE-2026-22557
nomisec
SCANNER
by GarethMSheldon · poc
https://github.com/GarethMSheldon/cve-2026-22557-unifi-detection
References (1)
Core 1
Scores
CVSS v3
10.0
EPSS
0.0003
EPSS Percentile
10.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-22
Status
published
Products (3)
Ubiquiti Inc/UniFi Network Application
10.1.89
Ubiquiti Inc/UniFi Network Application
10.2.97
Ubiquiti Inc/UniFi Network Application
9.0.118
Published
Mar 19, 2026
Tracked Since
Mar 19, 2026