PT-2026-27489 · Ubiquiti · Unifi Network Server

Published 2026-03-24 · Updated 2026-03-24 · CVE-2026-22559

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UniFi Network Server versions 10.1.85 and earlier

Description An improper input validation issue exists in UniFi Network Server that could allow unauthorized access to an account if an account owner is tricked into clicking a malicious link. The issue involves a vulnerability where malicious links can be crafted to gain unauthorized access.

Recommendations Update UniFi Network Server to version 10.1.89 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-22559

Affected Products

Unifi Network Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-22559 · Security Note
• https://twitter.com/TheHackerWire/status/2036548009576878586 · Twitter Post
• https://twitter.com/CveFindCom/status/2036544276654342226 · Twitter Post
• https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b · Note