CVE-2024-27981

published 2024-04-04

CVE-2024-27981: A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a…

Priority P2 66 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device.

Affected Products:
UniFi Network Application (Version 8.0.28 and earlier) .

Mitigation:
Update UniFi Network Application to Version 8.1.113 or later.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ubiquiti_inc	unifi_network_application	>= 8.1.113 < 8.1.113	8.1.113

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-77