CVE-2026-22559

Published Mar 24, 2026

Last updated 4 months ago

CVSS high 8.8
Network
OT

Overview

Description
An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affected Products: UniFi Network Server (Version 10.1.85 and earlier) Mitigation: Update UniFi Network Server to Version 10.1.89 or later.
Source
support@hackerone.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-20

Social media

Hype score
Not currently trending

Related CVEs

  1. CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.•CVE-2024-10085
  2. PaperCut NG/MF Unsafe Reflection Vulnerability•CVE-2026-82078
  3. PaperCut NG/MF Missing Authentication for Critical Function Vulnerability•CVE-2026-81578
  4. JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability•CVE-2026-66384
  5. Broadcom VMware vCenter Path Traversal Vulnerability•CVE-2026-59310

References

Sources include official advisories and independent security research.