[CVE-2026-55112] A malicious actor with access to the network and low privileges and under certain conditions could e…

Descripción técnica

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Unifi dream machine pro firmware, Unifi dream machine pro, Unifi dream machine special edition firmware, Unifi dream machine special edition, Unifi dream machine pro max firmware — Ui

Debilidades (CWE)

CWE-284

Fuente oficial

Publicado en NIST NVD.