UniFi Talk Application vulnerabilities

An attacker with network access could exploit an Improper Input Validation vulnerability in UniFi Talk Application to execute a Command Injection on the host device.

An authenticated SQL Injection vulnerability in UniFi Talk Application allows a network-accessible attacker with low privileges to escalate privileges on the host device.

An Improper Access Control vulnerability in UniFi Talk Application allows privilege escalation. An attacker with network access and low privileges can exploit this flaw.