Privilege Escalation Vulnerability in UISP Application by Ubiquiti

CVE-2025-27216

What is CVE-2025-27216?

The UISP Application developed by Ubiquiti is prone to incorrect permission assignment for critical resources. This vulnerability potentially allows malicious actors possessing specific permissions to escalate their privileges within the application. Exploitation of this flaw could grant unauthorized access to sensitive functionalities, leading to severe security implications. It is crucial for users of the UISP Application to take immediate action to address this issue.

References