CVE-2025-27216

Published: Aug 21, 2025

Modified: Aug 21, 2025

PUBLISHED

Description

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges.

Vendor	Product	Versions
Ubiquiti Inc	UISP Application	affected `2.4.220 - < 2.4.220`

References

https://community.ui.com/releases/Security-Advisory-Bulletin-053/b0c4aa38-90aa-412d-b5b9-6395e057d822

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-27216

Description

Affected Products

References