CVE-2026-22557

Published Mar 19, 2026

Last updated a month ago

CVSS critical 10.0
Network
Tunneling protocol

Overview

Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
Source
support@hackerone.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
10
Impact score
6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-22

Social media

Hype score
Not currently trending

Related CVEs

  1. Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.•CVE-2026-33825
  2. Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.•CVE-2026-33824
  3. Marimo Remote Code Execution Vulnerability•CVE-2026-39987
  4. Fortinet FortiClient EMS Improper Access Control Vulnerability•CVE-2026-35616
  5. Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15.•CVE-2026-31937

References

Sources include official advisories and independent security research.