Ubiquiti warns of a critical vulnerability in its UniFi Network Application management software, which allows for account takeover.
Network manufacturer Ubiquiti issued a warning on Wednesday regarding a serious vulnerability in its management software. UniFi Network Application is the central dashboard for managing, configuring, monitoring, and optimizing Ubiquiti routers, switches, and access points. The vulnerability CVE-2026-22557 has been assigned the highest possible CVSS score of 10.
Attackers with network access can progressively gain more control and ultimately take over your account. Through the software, they gain access to files on the underlying system, which can then be manipulated to gain access to an underlying account. According to Ubiquiti, this requires low complexity and no user interaction.
Two for the price of one
Ubiquiti’s security advisory includes a second vulnerability, CVE-2026-22558. With a CVSS score of 7.7, it is considered slightly less severe, but still gives Ubiquiti significant cause for concern. This vulnerability allows for privilege escalation via validated access.
The solution for both vulnerabilities is to update UniFi Network Application to the latest supported version, which is version 10.1.89. Given the severity of these vulnerabilities, it is recommended to do this as soon as possible.
Like any network equipment manufacturer, Ubiquiti must remain constantly vigilant against security flaws. Any router, switch, or access point can open the doors of your network to intruders. Previous vulnerabilities in Ubiquiti software even literally opened the door to your home or office building.