CVE-2025-52663
Oct. 31, 2025, 12:15 a.m.
None
No Score
Description
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This issue could allow an attacker with access to the UniFi Talk management network to invoke internal debug operations through the device API.
Affected Products:
UniFi Talk Touch (Version 1.21.16 and earlier)
UniFi Talk Touch Max (Version 2.21.22 and earlier)
UniFi Talk G3 Phones (Version 3.21.26 and earlier)
Mitigation:
Update the UniFi Talk Touch to Version 1.21.17 or later.
Update the UniFi Talk Touch Max to Version 2.21.23 or later.
Update the UniFi Talk G3 Phones to Version 3.21.27 or later.
Product(s) Impacted
| Vendor | Product | Versions |
|---|---|---|
| Ubiquiti |
|
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
*CPE(s)
Affected systems and software identified for this CVE.
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| a | ubiquiti | unifi_talk_touch | <1.21.16 | / | / | / | / | / | / | / |
| a | ubiquiti | unifi_talk_touch_max | <2.21.22 | / | / | / | / | / | / | / |
| a | ubiquiti | unifi_talk_g3_phones | <3.21.26 | / | / | / | / | / | / | / |
Tags
Timeline
Published: Oct. 31, 2025, 12:15 a.m.
Last Modified: Oct. 31, 2025, 12:15 a.m.
Last Modified: Oct. 31, 2025, 12:15 a.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
support@hackerone.com
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.