CVE-2026-55112CWE-284
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in…
High · published July 2, 2026
What it is
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00356 · 28.1th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2026-07-02T14:50Z
EPSS history
Timeline