What’s Vulnerable › Vulnerabilities

CVE-2021-44530

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-14 · updated 2026-06-17
• Weakness: CWE-20

Description

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to control the application.

Affected products

• Ubiquiti UniFi Network Controller: through 6.5.53

References

• https://community.ui.com/releases/Security-Advisory-Bulletin-023-023/808a1db0-5f8e-4b91-9097-9822f3f90207
• https://community.ui.com/releases/Security-Advisory-Bulletin-023-023/808a1db0-5f8e-4b91-9097-9822f3f90207

Get alerted when CVE-2021-44530 or the next vulnerability affects your stack