Skip to content
Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557
bishopfox.com | vulnerability | Critical | CVE-2026-22557 | #vulnerability-research | #access-control | #account-takeover | #network-security | #path-traversal | #unifi | #cve-2026-22557 | #detection-tool
Summary
CVE-2026-22557, a CVSS 10.0 path traversal in UniFi Network's guest portal, lets unauthenticated attackers read arbitrary files and controller backups holding admin credentials, enabling takeover.
- CVSS
- 10
- Published
- Collected