CVE-2025-23118

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.

Metrics

CVSS 3.0 6.4/10CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-295

Affected software

Vendor	Product	Versions
Ubiquiti Inc	UniFi Protect Cameras	>= 4.74.106, < 4.74.106

References

https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f

Timeline

Published: Mar 1, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-231197.5An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a ma CVE-2025-23125.9A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upc CVE-2025-231208.8A vulnerability allowing remote code execution (RCE) for domain users.CVE-2025-231218.8A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user CVE-2025-2312310.0A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vul CVE-2025-231295.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq()CVE-2025-23139.4In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter.CVE-2025-231305.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot rep CVE-2025-231315.5In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to event_done do_uevent CVE-2025-231325.5In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquot_writeback_dquots() F2FS-fs CVE-2025-231337.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker C CVE-2025-231345.5In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take register_mutex with copy_from/to_user() The in