VDB
CVE-2026-54408
CVE-2026-54408
PUBLISHED
CVSS 8.6 HIGH
Reported by hackerone · Published July 2, 2026
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.
Risk Scores
CVSS 3.1
8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubiquiti Inc | UniFi Protect Application | 0 |
| Ubiquiti Inc | UniFi Protect Application | 0 |
Timeline
- Jul 2, 2026 CVE Published
- Jul 2, 2026 CVE Updated
- Jul 3, 2026 EPSS Score
- Jul 4, 2026 Coalition ESS Score