Description
有权访问管理网络的恶意行为者可能会利用 UniFi 门禁应用程序 UniFi Access 中的错误配置，该错误配置暴露了未经适当身份验证的管理 API
UniFi 认证缺失导致命令执行 CVE-2025-52665
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-52665
https://community.ui.com/releases/Security-Advisory-Bulletin-056/ce97352d-91cd-40a7-a2f4-2c73b3b30191
https://ddpoc.com/DVB-2025-10316.html
https://catchify.sa/post/cve-2025-52665-rce-in-unifi-os-25-000
https://www.sentinelone.com/vulnerability-database/cve-2025-52665/
https://dbugs.ptsecurity.com/vulnerability/PT-2025-43553
https://github.com/cisagov/vulnrichment/blob/develop/2025/52xxx/CVE-2025-52665.json