PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557

bishopfox.com | vulnerability | Critical | CVE-2026-22557 | #vulnerability-research | #access-control | #account-takeover | #network-security | #path-traversal | #unifi | #cve-2026-22557 | #detection-tool
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2026-22557, a CVSS 10.0 path traversal in UniFi Network's guest portal, lets unauthenticated attackers read arbitrary files and controller backups holding admin credentials, enabling takeover.
CVE
CVE-2026-22557
CVSS
10
Published
Collected

Related coverage

vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
research · yokai.hakaisecurity.io
Client-Side Path Traversal na Prática: De Stored XSS à Exclusão de Conta
# Client-Side Path Traversal na Prática: De Stored XSS à Exclusão de Conta RESEARCHER **Pedro Cruz "gankd"** READ TIME**12 MINUTES** PUBLISHED**15 Oct 2026** INDEX ▸ Sumário ▸ Introdução ▸...
research · yokai.hakaisecurity.io
Client-Side Path Traversal in the Wild: From Stored XSS to Account Deletion
# Client-Side Path Traversal in the Wild: From Stored XSS to Account Deletion RESEARCHER **Pedro Cruz "gankd"** READ TIME**11 MINUTES** PUBLISHED**15 Oct 2026** INDEX ▸ Table of contents ▸...
blog · blog.viettelcybersecurity.com
Broken access control in GoAnywhere Admin portal
A GoAnywhere Admin Portal access-control flaw lets attackers bypass SecurityFilter using path traversal (/a/../) and reach the setup page, enabling unauthenticated creation of an admin account.
vulnerability · bishopfox.com
[CVE-2026-67279] MikroTrick: Inside the RouterOS Takeover Chain
Bishop Fox reproduced the MikroTrick RouterOS takeover chain, using CVE-2026-67279 and a second flaw for unauthenticated admin access on 7.x, and confirmed real devices were already compromised.
Critical · vulnerability · bishopfox.com
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit
The flaw can yield unauthenticated administrator takeover across four AD360-integrated ManageEngine products. Exploitation is targeted and timing-dependent, but the impact is critical.
Back