VDB
CVE-2026-56842
CVE-2026-56842
PUBLISHED
CVSS 7.5 HIGH
Reported by hackerone · Published July 2, 2026
A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubiquiti Inc | UniFi Network Application | 0 |
| Ubiquiti Inc | UniFi Network Application | 0 |
Timeline
- Jul 2, 2026 CVE Published
- Jul 2, 2026 CVE Updated
- Jul 3, 2026 EPSS Score
- Jul 4, 2026 Coalition ESS Score
- Jul 6, 2026 Security Advisory