VDB

CVE-2026-55116

CVE-2026-55116 PUBLISHED CVSS 9 CRITICAL

Reported by hackerone · Published July 2, 2026

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Risk Scores

CVSS 3.1
9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Ubiquiti IncDream Machines0
Ubiquiti IncEnterprise Fortress Gateway0
Ubiquiti IncDream Wall0
Ubiquiti IncDream Routers0
Ubiquiti IncExpress 70
Ubiquiti IncCloud Gateways0
Ubiquiti IncEnterprise Firewall Core0
Ubiquiti IncExpress 70
Ubiquiti IncEnterprise Firewall Core0
Ubiquiti IncDream Wall0
Ubiquiti IncDream Machines0
Ubiquiti IncDream Routers0
Ubiquiti IncEnterprise Fortress Gateway0
Ubiquiti IncCloud Gateways0

Timeline

  • Jul 2, 2026 CVE Published
  • Jul 2, 2026 CVE Updated
  • Jul 3, 2026 EPSS Score
  • Jul 4, 2026 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›