CVE-2026-22557

This Python script tests for CVE-2026-22557, a critical unauthenticated path traversal vulnerability in Ubiquiti UniFi Network Application. The script sends crafted HTTP requests with directory traversal payloads to common UniFi API endpoints to detect potential file read access (e.g., /etc/passwd).

This repository contains a Go-based scanner for CVE-2026-22557, targeting path traversal vulnerabilities in the UniFi Network Application. The tool tests multiple endpoints with various traversal payloads to detect potential vulnerabilities without exploiting them.

This repository contains a detection tool for CVE-2026-22557, an unauthenticated path-traversal vulnerability in UniFi Network Application's guest captive portal. The tool checks for vulnerability by probing the `page_error` parameter and determining if the traversal fires, without exploiting the vulnerability.

The repository contains a functional Python exploit for CVE-2026-22557, a pre-authentication path traversal vulnerability in the UniFi Network Application guest portal. The exploit leverages the `page_error` query parameter to read arbitrary files from the web application context, potentially extending to system files under specific conditions.

The repository contains a Python script that tests for CVE-2026-22557, a critical path traversal vulnerability in Ubiquiti UniFi Network Application. It sends HTTP requests with various traversal payloads to detect potential vulnerabilities but does not exploit them.

This repository provides a detection script and SIEM rules for identifying CVE-2026-22557, a path traversal vulnerability in Ubiquiti UniFi Network Application. It includes version checks, log scanning, and network exposure tests but does not contain exploit code.