VDB

CVE-2026-55115

CVE-2026-55115 PUBLISHED CVSS 9.9 CRITICAL

Reported by hackerone · Published July 2, 2026

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

Risk Scores

CVSS 3.1
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Ubiquiti IncUniFi Protect Application0
Ubiquiti IncUniFi Protect Application0

Timeline

  • Jul 2, 2026 CVE Published
  • Jul 2, 2026 CVE Updated
  • Jul 3, 2026 EPSS Score
  • Jul 4, 2026 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›