Ubiquiti Inc UniFi Protect Cameras

• CVE-2025-23123 Critical 10.0 A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43 and 1.2%
• CVE-2025-23119 High 7.5 An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent 0.7%
• CVE-2025-23117 Medium 6.8 An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera sy 0.2%
• CVE-2025-23115 Critical 9.0 A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network. 0.7%
• CVE-2025-23118 Medium 6.4 An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system. 0.2%