(CVE-2025-52665) UniFi门禁应用程序配置错误漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-52665
• https://community.ui.com/releases/Security-Advisory-Bulletin-056/ce97352d-91cd-40a7-a2f4-2c73b3b30191
• https://catchify.sa/post/cve-2025-52665-rce-in-unifi-os-25-000
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-43553
• https://github.com/cisagov/vulnrichment/blob/develop/2025/52xxx/CVE-2025-52665.json
• https://www.appsecure.security/vulnerability-database/cve-2025-52665/
• https://ddpoc.com/DVB-2025-10316.html
• https://vulners.com/cve/CVE-2025-52665
• https://community.ui.com/questions/Critical-Vulnerability-CVE-2025-52665/e1c8b4d1-9dac-4756-a064-20d84313d1f7
• https://s4e.io/tools/unifi-broken-access-control-to-rce-CVE-2025-52665

Related Vulnerabilities

• PoCCVE-2026-34908: UniFi OS - Authentication Bypass via Path Traversal (..%2f)
• UniFi Access /api/ucore/backup/export 命令执行漏洞（CVE-2025-52665）
• UniFi Network Application /guest/s/default/login 目录遍历漏洞（CVE-2026-22557）
• PoCCVE-2026-22557: UniFi Network Application - Path Traversal
• PoCCVE-2026-34910: UniFi OS Server - Command Injection
• UniFi 存在命令执行漏洞(CVE-2026-34910)
• UniFi OS Server latest_package 命令执行漏洞（CVE-2026-34908/CVE-2026-34909/CVE-2026-34910）
• Arcserve Unified Data Protection /management/wizardLogin 权限绕过漏洞（CVE-2024-0799）
• PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster Enumeration
• PoCCVE-2024-0799: Arcserve Unified Data Protection - Authentication Bypass
• PoCCVE-2024-0801: Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll
• PoCCVE-2025-52665: UniFi Access - Broken Access Control
• PoCunifi-create-user: UniFi - Unauthenticated Creation Access For Users