Ubiquiti — Vulnerabilities & Security Advisories 18

Ubiquiti develops networking and communications equipment for enterprises and service providers. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from default credentials and insufficient input validation. The company has experienced security incidents, including a 2015 breach where attackers accessed customer data through compromised credentials. Despite these issues, Ubiquiti devices remain widely deployed due to their cost-effectiveness. Security researchers continue to identify vulnerabilities in their products, with 18 CVEs currently documented, highlighting ongoing concerns about secure configuration and patch management practices in their ecosystem.