CVE Tools
Sign in
Back to feed
Patch released UniFi Network Application info-disclosure Ubiquiti web-app

Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557

Bishop Fox·By Jon Williams··23 min read
TL;DR

CVE-2026-22557 is an unauthenticated path traversal in the UniFi Network Application's guest captive portal, rated CVSS 10.0. It allows attackers to read arbitrary files from any site with a customized portal, including backups containing administrative credentials for all devices managed by the network controller. Patch to 10.1.89, 10.2.97, or 9.0.118 or later. Bishop Fox has published a CVE-2026-22557-check">safe detection tool; read on for the practical attack paths and the conditions for full exploitability.…

Continue reading on Bishop Fox

Related coverage

Other stories on the same CVEs
Worried this affects your company?

See what your business actually exposes to the Internet — a free external review, no install, no obligation.

Check my exposure