CVE-2026-22557
CRITICALUniFi Network Application 9.0.118-10.1.89, 10.2.97 - Path Traversal
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2026-22557. PoCs published by adminlove520, ThePotatoOfDoom, 0xBlackash.
AI-analyzed exploit summary The repository contains a functional Python exploit for CVE-2026-22557, a pre-authentication path traversal vulnerability in the UniFi Network Application guest portal. The exploit leverages the `page_error` query parameter to read arbitrary files from the web application context, potentially extending to system files under specific conditions.
Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
Exploits (4)
The repository contains a functional Python exploit for CVE-2026-22557, a pre-authentication path traversal vulnerability in the UniFi Network Application guest portal. The exploit leverages the `page_error` query parameter to read arbitrary files from the web application context, potentially extending to system files under specific conditions.
The repository contains a Python script that tests for CVE-2026-22557, a critical path traversal vulnerability in Ubiquiti UniFi Network Application. It sends HTTP requests with various traversal payloads to detect potential vulnerabilities but does not exploit them.
This repository provides a detection script and SIEM rules for identifying CVE-2026-22557, a path traversal vulnerability in Ubiquiti UniFi Network Application. It includes version checks, log scanning, and network exposure tests but does not contain exploit code.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H