CVE-2026-21633

A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol…

High · published January 5, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

🚨 A crafty neighbor could peek into your UniFi Protect Camera just by exploiting a vulnerability in the discovery protocol! 🔥 Think of this as a delivery driver who can access your home simply by standing outside your front porch — if they know the right tricks, they can find a way in. This vulnerability lets an attacker with adjacent network access bypass your security and view your camera feeds without permission. An attacker could gain unauthorized access to your camera feeds, posing a risk to your privacy and security. This means sensitive moments could be seen or misused by someone lurking nearby, and that's absolutely devastating! Your security could collapse in a heartbeat without the right protections in place.

Put simply

Think of this as a delivery driver who can access your home simply by standing outside your front porch — if they know the right tricks, they can find a way in. This vulnerability lets an attacker with adjacent network access bypass your security and view your camera feeds without permission. The vulnerability exists in the UniFi Protect Application (Version 6.1.79 and earlier) where a malicious actor could exploit the discovery protocol, allowing them to access cameras on the network without the necessary authorization.

What to do

An attacker could gain unauthorized access to your camera feeds, posing a risk to your privacy and security. This means sensitive moments could be seen or misused by someone lurking nearby, and that's absolutely devastating! Your security could collapse in a heartbeat without the right protections in place. To safeguard your cameras, it's crucial to update your UniFi Protect Application to Version 6.2.72 or later. Take this step right away to protect your privacy and avoid unauthorized access! You got this! Update your application, and you'll have your security firmly locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Published
2026-01-05T16:47Z
EPSS history
Timeline
  • 05 JAN 16:47Z
    A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol…
    cvelistv5