Ubiquiti Inc UISP Application

• CVE-2025-48979 Low 3.4 An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access. 0.5%
• CVE-2025-27216 High 8.8 Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges. 0.3%
• CVE-2025-27217 Critical 9.1 A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope. 0.4%
• CVE-2025-24290 Critical 9.9 Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges. 0.4%