CVE-2025-23091

No fix known EPSS <1%CVSS 5.9

An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update.

Published 2025-02-01 · CVE record · OSV

Products: Ubiquiti Inc UDM, Ubiquiti Inc UDM-Pro, Ubiquiti Inc UDM-SE, Ubiquiti Inc UDM-Pro-Max, Ubiquiti Inc UDW, Ubiquiti Inc UNVR, Ubiquiti Inc UNVR PRO, Ubiquiti Inc UCKP, Ubiquiti Inc UCK, Ubiquiti Inc UCK-Enterprise, Ubiquiti Inc UCG-Max, Ubiquiti Inc EFG