← Database

CVE-2026-54407

HIGH CVSS: 8.6 Published: 2026-07-02 Modified: 2026-07-06

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.

Affected Platforms

Ui Unifi Protect

Weakness Type

CWE-284

References