new plugin for Ubiquiti UAP support by rmorandell-pgum · Pull Request #6071 · centreon/centreon-plugins

rmorandell-pgum · 2026-03-25T10:31:20Z

Community contributors

Description

New plugin for Ubiquiti access points "UAP"

Modes Available:

cpu (standard)
interfaces (standard)
list-interfaces (standard)
list-radios
list-virtual-aps
load (standard)
memory (standard)
radio-health
uptime (standard)
virtual-ap-health

Type of change

Patch fixing an issue (non-breaking change)
New functionality (non-breaking change)
Functionality enhancement or optimization (non-breaking change)
Breaking change (patch or feature) that might cause side effects breaking part of the Software

How this pull request can be tested ?

UI-Combined-MIB.zip

ubiquiti-uap.github.snmpwalk.zip

Checklist

I have followed the coding style guidelines provided by Centreon
I have commented my code, especially hard-to-understand areas of the PR.
I have rebased my development branch on the base branch (develop).
I have provide data or shown output displaying the result of this code in the plugin area concerned.

Summary by Aikido

Security Issues: 0	🔍 Quality Issues: 7	Resolved Issues: 0

🚀 New Features

Added new Ubiquiti UAP SNMP plugin with multiple monitoring modes.
Implemented listing modes for radios and virtual access points.
Implemented health modes for radios and virtual access points.

^{More info}

aikido-pr-checks · 2026-03-25T10:32:07Z

+        my $instance = $1;
+        my $result = $options{snmp}->map_instance(mapping => $mapping, results => $snmp_result, instance => $instance);
+
+        if (defined($self->{option_results}->{filter_name}) && $self->{option_results}->{filter_name} ne '' &&


Directly interpolating --filter-name into /.../ allows regex injection/ReDoS. Escape (quotemeta) or validate the filter before using it in a regex match.

Details

✨ AI Reasoning
The code is attempting to filter SNMP results using user-provided --filter-name, --filter-radio, and --filter-usage values by interpolating them directly into regex matches. This allows untrusted input to control the regex pattern, which can cause regex injection or catastrophic backtracking (ReDoS) and unintended matches. Escaping or validating the input before use or using safe matching APIs would reduce risk.

🔧 How do I fix it?
Use parameterized queries with placeholders, array-based command execution (no shell interpretation), or properly escaped arguments using vetted libraries. Avoid dynamic queries/commands built with user input concatenation.

_{Reply @AikidoSec feedback: [FEEDBACK] to get better review comments in the future.}
_{Reply @AikidoSec ignore: [REASON] to ignore this issue.}
_{More info}

aikido-pr-checks · 2026-03-25T10:32:08Z

+            next;
+        }
+
+        if (defined($self->{option_results}->{filter_radio}) && $self->{option_results}->{filter_radio} ne '' &&


Directly interpolating --filter-radio into /.../ allows regex injection/ReDoS. Escape (quotemeta) or validate the filter before using it in a regex match.

Details

✨ AI Reasoning
The code filters by radio using user-provided --filter-radio interpolated directly into a regex. This exposes the matching to attacker-controlled patterns (injection or ReDoS). Input should be validated or escaped before building regex patterns.

🔧 How do I fix it?
Use parameterized queries with placeholders, array-based command execution (no shell interpretation), or properly escaped arguments using vetted libraries. Avoid dynamic queries/commands built with user input concatenation.

_{Reply @AikidoSec feedback: [FEEDBACK] to get better review comments in the future.}
_{Reply @AikidoSec ignore: [REASON] to ignore this issue.}
_{More info}

aikido-pr-checks · 2026-03-25T10:32:09Z

+            next;
+        }
+
+        if (defined($self->{option_results}->{filter_usage}) && $self->{option_results}->{filter_usage} ne '' &&


Directly interpolating --filter-usage into /.../ allows regex injection/ReDoS. Escape (quotemeta) or validate the filter before using it in a regex match.

Details

✨ AI Reasoning
The code filters by usage using user-provided --filter-usage interpolated directly into a regex. This permits injection of arbitrary regex patterns and potential ReDoS. Use escaping or stricter validation to mitigate.

🔧 How do I fix it?
Use parameterized queries with placeholders, array-based command execution (no shell interpretation), or properly escaped arguments using vetted libraries. Avoid dynamic queries/commands built with user input concatenation.

_{Reply @AikidoSec feedback: [FEEDBACK] to get better review comments in the future.}
_{Reply @AikidoSec ignore: [REASON] to ignore this issue.}
_{More info}

aikido-pr-checks · 2026-03-25T10:32:10Z

+            next;
+        }
+
+        if (defined($self->{option_results}->{filter_name}) && $self->{option_results}->{filter_name} ne '' &&


Directly interpolating --filter-name into /.../ allows regex injection/ReDoS. Escape (quotemeta) or validate the filter before using it in a regex match.

Details

✨ AI Reasoning
In manage_selection the --filter_name option is applied by interpolating its value into a regex check against result->{name}. This exposes regex injection / ReDoS risks from untrusted user input. Escape or validate before use.

🔧 How do I fix it?
Use parameterized queries with placeholders, array-based command execution (no shell interpretation), or properly escaped arguments using vetted libraries. Avoid dynamic queries/commands built with user input concatenation.

_{Reply @AikidoSec feedback: [FEEDBACK] to get better review comments in the future.}
_{Reply @AikidoSec ignore: [REASON] to ignore this issue.}
_{More info}

aikido-pr-checks · 2026-03-25T10:32:11Z

+        my $instance = $1;
+        my $result = $options{snmp}->map_instance(mapping => $mapping, results => $snmp_result, instance => $instance);
+
+        if (defined($self->{option_results}->{filter_name}) && $self->{option_results}->{filter_name} ne '' &&


Directly interpolating --filter-name into /.../ allows regex injection/ReDoS. Escape (quotemeta) or validate the filter before using it in a regex match.

Details

✨ AI Reasoning
User-provided --filter-name is used directly in a regex to filter radio names. Unvalidated input controlling regex can lead to injection or ReDoS. Prefer escaping or validating the provided pattern.

🔧 How do I fix it?
Use parameterized queries with placeholders, array-based command execution (no shell interpretation), or properly escaped arguments using vetted libraries. Avoid dynamic queries/commands built with user input concatenation.

_{Reply @AikidoSec feedback: [FEEDBACK] to get better review comments in the future.}
_{Reply @AikidoSec ignore: [REASON] to ignore this issue.}
_{More info}

aikido-pr-checks · 2026-03-25T10:32:13Z

+            next;
+        }
+
+        if (defined($self->{option_results}->{filter_radio}) && $self->{option_results}->{filter_radio} ne '' &&


Directly interpolating --filter-radio into /.../ allows regex injection/ReDoS. Escape (quotemeta) or validate the filter before using it in a regex match.

Details

✨ AI Reasoning
The code uses --filter-radio directly inside a regex match for radio values. This is user-controlled input used as a regex and can enable regex injection or ReDoS. Use escaping or restrict allowed characters/patterns.

🔧 How do I fix it?
Use parameterized queries with placeholders, array-based command execution (no shell interpretation), or properly escaped arguments using vetted libraries. Avoid dynamic queries/commands built with user input concatenation.

_{Reply @AikidoSec feedback: [FEEDBACK] to get better review comments in the future.}
_{Reply @AikidoSec ignore: [REASON] to ignore this issue.}
_{More info}

aikido-pr-checks · 2026-03-25T10:32:14Z

+            next;
+        }
+
+        if (defined($self->{option_results}->{filter_name}) && $self->{option_results}->{filter_name} ne '' &&


Directly interpolating --filter-name into /.../ allows regex injection/ReDoS. Escape (quotemeta) or validate the filter before using it in a regex match.

Details

✨ AI Reasoning
The code uses user-supplied --filter-name in a regex to filter VAP names without escaping. This could enable regex injection or ReDoS from crafted input. Input should be sanitized or escaped (e.g., quotemeta) before usage.

🔧 How do I fix it?
Use parameterized queries with placeholders, array-based command execution (no shell interpretation), or properly escaped arguments using vetted libraries. Avoid dynamic queries/commands built with user input concatenation.

_{Reply @AikidoSec feedback: [FEEDBACK] to get better review comments in the future.}
_{Reply @AikidoSec ignore: [REASON] to ignore this issue.}
_{More info}

rmorandell-pgum and others added 4 commits March 24, 2026 12:02

radio-health & vap-health

0f7a820

list modes

0366e35

spellchecking

6dbc476

Merge branch 'centreon:develop' into ubiquiti-UAP

44da2f4

rmorandell-pgum requested review from a team as code owners March 25, 2026 10:31

rmorandell-pgum requested review from omercier and scresto31 March 25, 2026 10:31

aikido-pr-checks Bot reviewed Mar 25, 2026

View reviewed changes

refactor help

efc948e

github-actions Bot added the external label Mar 26, 2026

lucie-tirand added new in-backlog contribution labels Apr 16, 2026

Navigation Menu

Uh oh!

new plugin for Ubiquiti UAP support - #6071

new plugin for Ubiquiti UAP support#6071
rmorandell-pgum wants to merge 5 commits into
centreon:developfrom
i-Vertix:ubiquiti-UAP

rmorandell-pgum commented Mar 25, 2026 •

edited by lucie-tirand

Loading

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

rmorandell-pgum commented Mar 25, 2026 • edited by lucie-tirand Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Community contributors

Description

Type of change

How this pull request can be tested ?

Checklist

Summary by Aikido

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Choose a reason for hiding this comment

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Choose a reason for hiding this comment

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Choose a reason for hiding this comment

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Choose a reason for hiding this comment

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Choose a reason for hiding this comment

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Choose a reason for hiding this comment

Uh oh!

aikido-pr-checks Bot Mar 25, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

rmorandell-pgum commented Mar 25, 2026 •

edited by lucie-tirand

Loading