CVE-2025-48979

Published: Aug 28, 2025

Modified: Aug 29, 2025

PUBLISHED

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.

Vendor	Product	Versions
Ubiquiti Inc	UISP Application	affected `2.4.220 - < 2.4.220`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.