CVE-2026-22559

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into…

High · published March 24, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link.

Affected Products:

UniFi Network Server (Version 10.1.85 and earlier)

Mitigation:

Update UniFi Network Server to Version 10.1.89 or later.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 30.0th percentile
Published
2026-03-24T19:05Z
EPSS history
Timeline
  • 24 MAR 19:05Z
    An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into…
    cvelistv5