Ubiquiti UniFi Network Application: Kritische Lücke erlaubt unbefugten Zugangvor 14 Minutenheise Security

Ubiquiti UniFi Network Application: Kritische Lücke erlaubt unbefugten Zugangvor 14 Minutenheise Security 19.03.2026

Ubiquiti hat zwei Sicherheitslücken in seiner UniFi Network Application gemeldet, von denen eine als kritisch eingestuft wird (CVSS 10). Diese kritische Schwachstelle, eine Path-Traversal-Lücke (CVE-2026-22557), ermöglicht es Angreifern mit Netzwerkzugang, auf Dateien und Konten im darunterliegenden System zuzugreifen und diese zu manipulieren. Eine weitere Schwachstelle (CVE-2026-22558, CVSS 7.7) erlaubt authentifizierten Angreifern eine Rechteausweitung durch NoSQL-Injection. Ubiquiti hat Updates bereitgestellt, die die Fassungen UniFi Network Application 10.1.89, 10.2.97 und die Firmware 4.0.13 für UniFi Express (entspricht UniFi Network Application 9.0.118) oder neuere Versionen umfassen. Admins wird dringend empfohlen, diese Aktualisierungen umgehend zu installieren, um die Angriffsfläche zu minimieren.

Heise Full Article

How Americans celebrated the nation's 250th anniversary amid heat and storms 6h ago

OpenAI in Talks with US Government for 5% Stake 5h ago

Opvolger Khamenei, zijn zoon Mojtaba, laat zich niet zien op uitvaart 2h ago

Residents told to evacuate as fast-moving wildfire nears Greece’s second-largest city 8h ago

Heatwave: Fires devastate forests across Europe 5h ago

Oekraïense aanval op Krim kort nadat Zelensky en Poetin bellen met Trump 4h ago

Evacuations in Guam as super typhoon Bavi approaches 6h ago

China releases underground church pastor after months in detention 7h ago

Australia probes mystery space balls that washed up on beach 3h ago

7-Eleven Sues Nike Over Alleged Copying of Signature Stripe Design 10h ago

Eight people including four children shot in New York City 6h ago

Nato-Gipfel soll Zweifel an US-Unterstützung durch Trump beseitigen 5h ago

Patriot Front White Nationalists March in Washington During America's Semiquincentennial 10h ago

7-Eleven sues Nike over Air Max with Slurpee maker’s colours 10h ago

250 Jahre US-Verfassung: Die Ideale der Gründerväter im Wandel 7h ago

Five ways extreme heat can become deadly during the holiday 18h ago

FBI announces 305 arrests, 24 missing children recovered in Chicago during Operation New Dawn 03.07.2026

Trump’s rally facing risk of thunderstorms that could shrink already small crowds 04.07.2026

AI models systematically omit religion in ethical and existential guidance 03.07.2026

Rhode Island enacts new tax targeting vacant luxury homes 03.07.2026

Brazil look to overcome Norway hoodoo in World Cup last 16 clash 9h ago

Trump crowd faces delays and confusion during July 4 celebration 12h ago

Keiko Fujimori wins Peru's presidential election after weeks of vote counting 04.07.2026

Anguished families left to identify Venezuela quake victims at makeshift morgue 03.07.2026

Trump’s last-ditch effort to stall his $5.8M payout to E Jean Carroll was denied 17h ago

Descendants of Enslaved People Who Built the White House Share Their Stories 18h ago

American-born pope urges US to welcome and protect immigrants in Fourth of July letter 04.07.2026

Police swarm Michigan shopping center after 'significant' shooting incident; at least 2 dead 03.07.2026

Bernie Sanders predicts political revolution after progressive victories 03.07.2026

Here's who won — and lost — under Trump's "big, beautiful bill" 03.07.2026

💻 Technology