CVE-2026-56842CWE-863

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network…

High · published July 2, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-07-02T14:50Z
EPSS history
Timeline
  • 02 JUL 14:50Z
    A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network…
    cvelistv5