Authenticated NoSQL Injection Risk in UniFi Network Application by Ubiquiti

CVE-2026-22558

What is CVE-2026-22558?

An authenticated NoSQL injection vulnerability has been identified in Ubiquiti's UniFi Network Application, which enables malicious actors with authenticated access to exploit this flaw. By leveraging this vulnerability, attackers can potentially escalate their privileges within the network, compromising sensitive data and overall security integrity. It is crucial for network administrators to review their systems and implement necessary security measures to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References