CVE-2025-23116 - An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras

Back Back to CVE browser

CRITICAL

An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras

Published Mar 1, 2025

9.6

CRITICAL

CVSS 3.0

EPSS 0.51%

Description

An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras.

Affected products

Vendor Ubiquiti Inc Product UniFi Protect Application Default
unaffected
- Version
  5.2.49
  Status
  affected
  Constraints
  <5.2.49

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ubiquiti Inc

UniFi Protect Application

unaffected

Version	Status	Constraints
5.2.49	affected	<5.2.49

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

Link	Providers	Tags
https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-5915		Advisory