PT-2025-34793 · Ubiquiti · Ubiquiti Unifi

Derrie Sutton + 1 · Published 2025-08-26 · Updated 2025-08-26 · CVE-2025-36729

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: (affected versions not specified)

Description: A non-primary administrator user with admin rights to the web interface, but without shell access permissions, can view the device configuration, including the master admin password. This also allows the user to gain shell access with root group ID.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-36729

Affected Products

Ubiquiti Unifi

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-36729 · Security Note
• https://twitter.com/VulmonFeeds/status/1960442902850449463 · Twitter Post
• https://tenable.com/security/research/tra-2025-25 · Note
• https://t.me/CVEtracker/30946 · Telegram Post
• https://twitter.com/CVEnew/status/1960383316084843002 · Twitter Post