CVE-2026-55112
HIGH7.5CVSS v3
—CVSS v2
0.20%
EPSS (exploit probability)
CWE-284CWE
Description
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Ubiquiti | Ubiquiti UniFi Dream Machine Pro | — |
versionEndIncluding=5.1.15 | — | Patched |