CVE-2025-27216 — Ubiquiti Inc / UISP Application

CVE-2025-27216

Ubiquiti Inc / UISP Application PUBLISHED

Description (CNA)

Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges.

Affected (CNA)

Vendor / product	Versions
Ubiquiti Inc / UISP Application	affected 2.4.220 before 2.4.220

CWE

No CWE identifiers supplied.

References

https://community.ui.com/releases/Security-Advisory-Bulletin-053/b0c4aa38-90aa-412d-b5b9-6395e057d822

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.