---
id: 3815
title: "Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557"
cve: CVE-2026-22557
cvss: 10
severity: critical
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/looting-unifi-controllers-detecting-and-weaponizing-cve-2026-22557"
published_at: "2026-05-29 00:00"
tags: ["vulnerability-research", "access-control", "account-takeover", "network-security", "path-traversal", "unifi", "cve-2026-22557", "detection-tool"]
phying_url: "https://phying.com/item/3815"
lang: en
---

# Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557

## Summary

CVE-2026-22557, a CVSS 10.0 path traversal in UniFi Network's guest portal, lets unauthenticated attackers read arbitrary files and controller backups holding admin credentials, enabling takeover.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2026-22557
- **CVSS:** 10
- **Published:** 2026-05-29 00:00
- **Original:** https://bishopfox.com/blog/looting-unifi-controllers-detecting-and-weaponizing-cve-2026-22557
- **Phying News:** https://phying.com/item/3815