gagaltotal/cve-2026-22557-path-traversal-ubiquti-unifiCVE-2026-22557 Path Traversal Ubiquti UniFi Network Application
This repository contains a Go-based proof-of-concept scanner for CVE-2026-22557 targeting the UniFi Network Application. The tool performs a controlled and non-destructive scan against a set of common endpoints and traversal payloads to identify potentially vulnerable behavior.
The program is designed to:
git clone https://github.com/gagaltotal/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
cd CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
go mod init CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
go mod tidy
go run poc_cve_unifi.go
Build the binary with the following command:
go build -o poc_cve_unifi .
You can also run the source directly:
go run . <target> [port]
Run the scanner with a target IP, hostname, or URL:
./poc_cve_unifi 192.168.1.100
Specify a custom port:
./poc_cve_unifi https://unifi.local 8443
Use the alternative argument style:
./poc_cve_unifi -t 192.168.1.100 -p 8443
Display help:
./poc_cve_unifi --help
Show version information:
./poc_cve_unifi --version
The scanner currently tests the following common paths:
This tool is provided for educational purposes and authorized security testing only. Unauthorized access to computer systems is illegal. Use this software responsibly and only against systems you are permitted to assess.