CVE-2019-25652 UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM
Adjacent attackers can intercept SMTP traffic and steal credentials via man-in-the-middle attacks due to improper SSL certificate validation in UniFi Network Controller.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-25652?
CVE-2019-25652 is a high-severity vulnerability in Ubiquiti UniFi Network Controller, published on 27 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to conduct man-in-the-middle attacks by presenting a false SSL certificate during SMTP connections. Attackers can intercept SMTP traffic and obtain credentials by exploiting the insecure SSL host verification mechanism in the SMTP certificate validation process.
Weakness: CWE-295
Which versions are affected by CVE-2019-25652?
How do I fix CVE-2019-25652?
No fix has been published for CVE-2019-25652 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-25652 being exploited?
There is no known exploitation of CVE-2019-25652 in the wild and no public exploit code.
Sources
Also known as GHSA-cwvv-m84p-3r2p.