10
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
CVE-2026-22557 -- UniFi Network Application Pre-Auth Path Traversal Pre-authenticated path traversal in the UniFi Network Application guest portal /guest/s/site/login. The pageerror query parameter is passed to a resource loader without validation,...
Basic Information
ID
7D4D4A9C-8854-518B-AE2B-91AC4B6380B9
Published
Apr 11, 2026 at 14:21
Modified
Apr 11, 2026 at 14:33