PT-2026-28262 · Ubiquiti · Unifi Network Controller+4

Published 2026-03-27 · Updated 2026-03-27 · CVE-2019-25651

NVD

CVSS v3.1

8.3

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weaknesses that allow attackers to recover encryption keys from captured traffic. Attackers with adjacent network access can capture sufficient encrypted traffic and exploit AES-CBC mode vulnerabilities to derive the encryption keys, enabling unauthorized control and management of network devices.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2019-25651

Affected Products

Unifi Network Controller

Unifi Uap Firmware

Unifi Uap-Ac Firmware

Unifi Usg Firmware

Unifi Usw Firmware

References · 3

• https://community.ui.com/releases/Security-Advisory-Bulletin-004-004/462e561b-9efd-4c23-bfa7-53d59cc64ecb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25651 · Security Note
• https://vulncheck.com/advisories/ubiquiti-unifi-devices-use-of-aes-cbc-allows-key-recovery-and-unauthorized-device-control · Note