CVE-2026-22559

Published: Mar 24, 2026 Last Modified: Mar 24, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.

Affected Products:
UniFi Network Server (Version 10.1.85 and earlier)

Mitigation:
Update UniFi Network Server to Version 10.1.89 or later.

https://community.ui.com/releases/Security-Advisory-Bulleti…
https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-4…