Critical severity9.1NVD Advisory· Published Aug 21, 2025· Updated Apr 15, 2026

CVE-2025-27217

Description

A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.

Affected products

Ubiquiti Inc/UISP Applicationllm-create
Range: <2.4.220

Patches

Vulnerability mechanics

References

community.ui.com/releases/UISP-Application-2-4-220/b428b276-c4a6-4b90-b97b-1860ff2bb46dnvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000