CVE-2026-22557

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the…

Critical · published March 19, 2026

CVSS v3.1
10.0
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.28116 · 98.1th percentile
Published
2026-03-19T14:24Z
EPSS history
Timeline
  • 19 MAR 14:24Z
    A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the…
    cvelistv5