Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Ubiquiti ha rilasciato aggiornamenti di sicurezza per sanare 4 vulnerabilità con gravità “alta” in diversi prodotti. Tali vulnerabilità potrebbero consentire a un utente malintenzionato di eseguire codice arbitrario sui sistemi interessati, di ottenere privilegi elevati o di compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.00 CVE-2026-116836 CVE-2026-116837 CVE-2026-116838 CVE-2026-116839 Ubiquiti IT
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
CVE-2021-44228 * CVE-2024-3272 * CVE-2024-3273 * CVE-2025-31324 * D-Link Ubiquiti US
Ubiquiti ha rilasciato aggiornamenti di sicurezza che sanano alcune vulnerabilità, di cui 2 con gravità "alta", in UniFi Protect AI Key, componente della piattaforma di videosorveglianza IP UniFi Protect. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un attaccante remoto di eseguire codice arbitrario e compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.01 CVE-2026-110455 CVE-2026-110459 Ubiquiti IT
Classification: Important, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 7.5, CVEs: CVE-2026-77544, CVE-2026-77555, CVE-2026-77556, CVE-2026-77558, CVE-2026-95861, CVE-2026-95862, Summary: Ubiquiti has corrected six vulnerabilities affecting current UniFi gateway devices. An attacker with network access to an affected device can exploit the vulnerabilities to cause a denial-of-service condition and interrupt network connectivity. The affected product families include Dream…
EPSS 0.01 CVSS 7.5 CVE-2026-77544 CVE-2026-77555 CVE-2026-77556 CVE-2026-77558 CVE-2026-95861 CVE-2026-95862 Ubiquiti FI
Serial number: AV26-954Date: September 23, 2026 As of September 22, 2026, Ubiquiti Inc is affected by vulnerabilities in the following products: Cloud Gateways Prior to 5.1.31 Dream Machines Prior to 5.1.31 Dream Routers Prior to 5.1.31 Dream Wall Prior to 5.1.31 Enterprise Firewalls Prior to 5.1.31 Express Prior to 4.0.21 Express 7 Prior to 5.1.31 UniFi Gateways Prior to 5.1.26 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates…
Ubiquiti CA
CONTEXT La sfârșitul lunii august 2026, Ubiquiti a publicat Security Advisory Bulletin 067, ...
Ubiquiti RO
For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manchester Airports Group, the UK operator of Manchester, London Stansted, and East Midlands airports, has disclosed a cyberattack that exposed data belonging to about 8.7 million customers. The compromised information includes contact details, vehicle registration numbers, and information collected through car park, lounge, fast-track, and Wi-Fi…
KEV ✓ EPSS 0.85 CVSS 10.0 CVE-2026-18885 CVE-2026-18886 CVE-2026-74820 CVE-2026-75604 CVE-2026-81578 CVE-2026-82078 PaperCut Ubiquiti Vercel ServiceNow IL
Ubiquiti heeft kwetsbaarheden verholpen in verschillende UniFi-producten, waaronder UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge en UniFi Talk. De kwetsbaarheden betreffen voornamelijk improper input validation en improper access control binnen de genoemde UniFi-producten. Door onvoldoende validatie van invoer kunnen kwaadwillenden met…
Ubiquiti NL
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-77557, CVE-2026-77554, CVE-2026-77553, CVE-2026-77552, CVE-2026-77551, CVE-2026-77550, CVE-2026-77549, CVE-2026-77548, CVE-2026-77547, CVE-2026-77546, CVE-2026-77545, CVE-2026-77543, CVE-2026-77541, CVE-2026-77540, CVE-2026-77539, CVE-2026-77538, CVE-2026-77537, CVE-2026-77536, CVE-2026-77535, CVE-2026-77534, CVE-2026-77533, Summary: CVE-2026-77557 9.8 A malicious actor with access to…
EPSS 0.02 CVSS 10.0 a dalších 4 CVE-2026-77537 CVE-2026-77538 CVE-2026-77539 CVE-2026-77540 CVE-2026-77541 CVE-2026-77543 CVE-2026-77545 CVE-2026-77546 CVE-2026-77547 CVE-2026-77548 CVE-2026-77549 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554 CVE-2026-77557 Ubiquiti FI
Serial Number: AV26-850Date: August 26, 2026 As of August 26, 2026, Ubiquiti is affected by critical vulnerabilities in the following products: UniFi OS Server Prior to or equal to 5.1.21 UniFi Connect Application Prior to or equal to 3.24.20 UniFi Network Application Prior to or equal to 10.4.57 UID Enterprise Agent Prior to or equal to 1.61.8 UniFi Access Application Prior to or equal to 4.3.3 UniFi Protect Application Prior to or equal to 7.1.87 UniFi Connect Display Cast Pro Prior to or…
Ubiquiti CA
Aggiornamenti di sicurezza hanno sanato 23 vulnerabilità, di cui 22 con gravità "critica" e una con gravità "alta", presenti in vari prodotti UniFi. Queste vulnerabilità, qualora sfruttate, potrebbero permettere a un utente malintenzionato di eludere i meccanismi di autenticazione, eseguire codice arbitrario o elevare i propri privilegi sui dispositivi target.
EPSS 0.02 a dalších 6 CVE-2026-77538 CVE-2026-77539 CVE-2026-77540 CVE-2026-77541 CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77546 CVE-2026-77547 CVE-2026-77548 CVE-2026-77549 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553 CVE-2026-77554 CVE-2026-77557 Ubiquiti IT
Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely without privileges. [...]
CVE-2026-77537 * CVE-2026-77550 * CVE-2026-77554 * Ubiquiti US
For the latest discoveries in cyber research for the week of 22nd June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Texas Parks and Wildlife Department has been affected by a third-party data breach involving its license system vendor. The incident exposed driver’s license information, passport numbers, emails, phone numbers, and residential addresses for 3,087,721 hunting and fishing license customers. Social Security numbers and payment data were not affected.…
KEV ✓ EPSS 0.96 CVE-2026-20245 CVE-2026-33017 CVE-2026-34908 CVE-2026-34909 CVE-2026-34910 CVE-2026-41947 CVE-2026-41948 CVE-2026-55255 Cisco Ubiquiti Dify Langflow veřejná správa zdravotnictví finance IL