VulnSocial

CVE-2026-22559General

LOWCVSS 8.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affected Products: UniFi Network Server (Version 10.1.85 and earlier) Mitigation: Update UniFi Network Server to Version 10.1.89 or later.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • General: 4 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 3 mentions on most recent observed day (2026-06-08)
  • 6 total mentions across 3 days

Deep dive

Activity timeline6 mentions / 3d
01223Mentions · 2026-03-22: 1Mentions · 2026-03-24: 2Mentions · 2026-06-08: 3Patch / Workaround · 2026-03-24: 1Technical Details · 2026-03-24: 2Technical Details · 2026-06-08: 103-2203-2406-08
Signal classification3 categories
General
466.7%
Disclosure
116.7%
Patch
116.7%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-221
General1
2026-03-242
Disclosure1Patch1
2026-06-083
General3
Full discourse6 posts
  • Shubham Gupta 🇮🇳@hackerspider1
    General

    https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b #CVE-2026-22559 @Ubiquiti https://t.co/vJQD6YrhuE

    Post summary

    The tweet merely links to a Ubiquiti community advisory for CVE-2026-22559 without providing additional details.

    53032132.2K
    7.3K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-22559 - High An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. ... https://www.thehackerwire.com/vulnerability/CVE-2026-22559/ https://t.co/a72joJdptk

    Post summary

    The tweet announces CVE-2026-22559, describing an improper input validation flaw in UniFi Network Server that could lead to unauthorized account access through social engineering. No PoC, exploit, or patch information is provided.

    0001055
    145 followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The post simply lists a series of UniFi-related CVE identifiers along with their severity scores, offering no additional technical details, exploitation evidence, or mitigation information.

    00000116
    1.2K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The post enumerates a set of UniFi-related CVEs with associated CVSS scores, offering only high-level information without deeper technical or operational context.

    0000057
    1.2K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The tweet lists a series of UniFi-related CVEs with their CVSS scores but offers no technical details, PoC, exploits, patches, or evidence of active exploitation.

    00000110
    1.2K followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-22559: HIGH] Vulnerability in UniFi Network Server allows unauthorized access via malicious link. Update to Version 10.1.89 to mitigate risk. #Cybersecurity#cve,CVE-2026-22559,#cybersecurity https://cvefind.com/CVE-2026-22559

    Post summary

    The post announces CVE‑2026‑22559, a vulnerability that allows unauthorized access via a malicious link, and advises updating to UniFi Network Server version 10.1.89 for protection.

    0000051
    605 followersView on X

Explore more

Back to dashboard