VDB

CVE-2026-55112

CVE-2026-55112 PUBLISHED CVSS 7.5 HIGH

Reported by hackerone · Published July 2, 2026

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Ubiquiti IncDream Machines0
Ubiquiti IncDream Wall0
Ubiquiti IncDream Routers0
Ubiquiti IncCloud Keys0
Ubiquiti IncNetwork Video Recorders0
Ubiquiti IncEnterprise Video Recorders0
Ubiquiti IncCloud Gateways0
Ubiquiti IncCloud Gateways0
Ubiquiti IncDream Machines0
Ubiquiti IncCloud Keys0
Ubiquiti IncDream Routers0
Ubiquiti IncEnterprise Video Recorders0
Ubiquiti IncNetwork Video Recorders0
Ubiquiti IncDream Wall0

Timeline

  • Jul 2, 2026 CVE Published
  • Jul 2, 2026 CVE Updated
  • Jul 3, 2026 EPSS Score
  • Jul 4, 2026 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›