Skip to content
CVE PROGRAM SOURCE RECORD3.4 Low

CVE-2025-48979

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubiquiti Inc UISP Application

Default version status: unaffected

  • 2.4.220 to < 2.4.220affected

References