Approved changes feed: RSS · Atom

cpe:2.3:a:ui:unifi_access:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUi (05cd6c40-c92e-5edc-9588-6ff25fd55039)
ProductUnifi Access (50f1522f-191d-5546-a5f3-0c0c0fada0b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-52665 vulnerable 2026-06-08 07:31:12.842128 Details available
A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later.  Affected Products: UniFi Access Application (Version 3.3.22 through 3.4.31). 
 Mitigation: Update your UniFi Access Application to Version 4.0.21 or later.
Published: 2025-10-30T23:30:28.329Z
Updated: 2025-10-31T14:07:27.850Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.