📦

unifi_protect

Vendor: ui

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 2 Remote Access
Total CVEs 16 Total Indexed
Avg. EPSS 0.55% Exploit Prob.
Latest CVE CVE-2026-56841 Jul 02

Security Vulnerability Index

Page 2 / 2
5.3 CVSS
CVE-2020-8213

An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.

EPSS: 1.11%
8.8 CVSS
CVE-2020-8188
RCE

We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Protect firmware v1.13.2, v1.14.9 and prior according to the description below:View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges.

EPSS: 1.34%