CVE-2026-22558 – Ubiquiti
“One max-score vulnerability is all it takes to turn a network into an open door.”
Ubiquiti has released a patch addressing two vulnerabilities that impact network security and device integrity. CVE-2026-22557 carries a CVSS score of 10.0, which is Critical severity. This represents the highest possible risk, where attackers could potentially gain full control over affected systems with little to no resistance. CVE-2026-22558 has a CVSS score of 7.7, which is High severity, introducing additional risk that could be used to support further compromise or disrupt operations.
There is no verified evidence of real-world exploitation or public proof-of-concept code for either vulnerability. Despite that, the presence of a maximum severity issue significantly raises the urgency, especially in exposed network environments where Ubiquiti devices are widely deployed.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-943