Ubiquiti Inc UniFi Connect EV Station Lite

• CVE-2026-21635 Medium 5.3 An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted via Ethernet. 0.1%
• CVE-2025-24285 Critical 9.8 Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV Station Lite. Aff 1.2%