CVE-2026-22557 Scanner

The UniFi Network Application is widely used by network administrators and IT professionals to manage networking devices from Ubiquiti Networks. It provides a comprehensive platform for setting up, managing, and monitoring networks, supporting devices such as routers, switches, and access points. This software is utilized in diverse environments, including enterprise offices, educational institutions, and large-scale networks, thanks to its robust scalability and management capabilities. The intuitive interface and versatility make UniFi a preferred choice for centralized network administration. The software also facilitates seamless network security and configuration, essential for maintaining network integrity and performance.

The path traversal vulnerability in the UniFi Network Application is critical as it potentially allows unauthorized users to access restricted directories and manipulate files. This flaw can have significant security implications, including unauthorized access to sensitive user data and system files. Attackers exploiting this vulnerability can bypass security controls and gain higher access privileges, posing a severe threat to network security. Given the critical nature of this vulnerability, it is of utmost importance for users of the UniFi Network Application to address this issue promptly.

In this particular path traversal vulnerability, the vulnerable endpoint is the "/guest/s/default/login" page. The vulnerability is triggered through improper handling of input within the "page_error" parameter, allowing directory traversal using the "..%2F..%2F" sequence. When combined with specific requests, this allows an attacker to access sensitive files like "web.xml", which can contain configurations and credentials. The affected parameter is exploited by sending an HTTP request specially crafted to retrieve files outside the intended directory. Ensuring proper input validation and sanitization can mitigate such vulnerabilities effectively.

If exploited, the vulnerability can lead to widespread consequences, including unauthorized access to sensitive files, account compromise, and potentially full system control. Network integrity could be severely compromised, leading to data breaches, service disruption, and reputational damage to the organization running the network. With sensitive information exposed, attackers can conduct further attacks, such as privilege escalation or injecting malicious scripts. Thus, addressing the vulnerability is crucial to protect against potential exploitation and maintaining the security posture of the network.

REFERENCES

• https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b
• https://github.com/ThePotatoOfDoom/CVE-2026-22557-PoC
• https://www.cycognito.com/blog/emerging-threat-ubiquiti-unifi-network-application-path-traversal-cve-2026-22557/
• https://nvd.nist.gov/vuln/detail/CVE-2026-22557