Improper Input Validation in UISP Application by Ubiquiti

CVE-2025-48979

What is CVE-2025-48979?

A vulnerability in the UISP Application from Ubiquiti arises from improper input validation, which can be exploited by malicious actors with elevated privileges and local access, potentially leading to command injection. This flaw creates significant security risks as it allows attackers to execute unauthorized commands on the affected system, compromising the integrity of the application and potentially affecting the network configurations.

References