What’s Vulnerable › Vulnerabilities

CVE-2025-23091

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-01 · updated 2026-06-17
• Weakness: CWE-295

Description

An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update.

Affected products

• Ubiquiti Inc EFG: from 4.1.13 before 4.1.13 — fixed in 4.1.13
• Ubiquiti Inc UCG-Max: from 4.1.13 before 4.1.13 — fixed in 4.1.13
• Ubiquiti Inc UCK: from 4.1.11 before 4.1.11 — fixed in 4.1.11
• Ubiquiti Inc UCK-Enterprise: from 4.1.11 before 4.1.11 — fixed in 4.1.11
• Ubiquiti Inc UCKP: from 4.1.11 before 4.1.11 — fixed in 4.1.11
• Ubiquiti Inc UDM: from 4.1.13 before 4.1.13 — fixed in 4.1.13
• Ubiquiti Inc UDM-Pro: from 4.1.13 before 4.1.13 — fixed in 4.1.13
• Ubiquiti Inc UDM-Pro-Max: from 4.1.13 before 4.1.13 — fixed in 4.1.13
• Ubiquiti Inc UDM-SE: from 4.1.13 before 4.1.13 — fixed in 4.1.13
• Ubiquiti Inc UDW: from 4.1.13 before 4.1.13 — fixed in 4.1.13
• Ubiquiti Inc UNVR: from 4.1.11 before 4.1.11 — fixed in 4.1.11
• Ubiquiti Inc UNVR PRO: from 4.1.11 before 4.1.11 — fixed in 4.1.11

How to fix

Upgrade to a fixed version: Ubiquiti Inc EFG 4.1.13; Ubiquiti Inc UCG-Max 4.1.13; Ubiquiti Inc UCK 4.1.11; Ubiquiti Inc UCK-Enterprise 4.1.11; Ubiquiti Inc UCKP 4.1.11; Ubiquiti Inc UDM 4.1.13; Ubiquiti Inc UDM-Pro 4.1.13; Ubiquiti Inc UDM-Pro-Max 4.1.13; Ubiquiti Inc UDM-SE 4.1.13; Ubiquiti Inc UDW 4.1.13; Ubiquiti Inc UNVR 4.1.11; Ubiquiti Inc UNVR PRO 4.1.11. Check the vendor advisory for mitigations.

References

• https://community.ui.com/releases/Security-Advisory-Bulletin-045-045/6011bc61-f2eb-457f-b71d-755703817aaf

Get alerted when CVE-2025-23091 or the next vulnerability affects your stack