Debugging Functionality Vulnerability in UniFi Talk Devices

CVE-2025-52663

What is CVE-2025-52663?

A vulnerability has been discovered in specific UniFi Talk devices where internal debugging features were unintentionally left enabled. This oversight could potentially allow an attacker with access to the management network of UniFi Talk devices to execute internal debugging operations via the device's API. Affected users are advised to update their devices to the latest versions: UniFi Talk Touch (1.21.17 or later), UniFi Talk Touch Max (2.21.23 or later), and UniFi Talk G3 Phones (3.21.27 or later) to mitigate this issue.

References