← Database
CVE-2026-55112
HIGH
CVSS: 7.5
Published: 2026-07-02
Modified: 2026-07-10
Description
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
Affected Platforms
Ui Unifi Dream Machine Pro Max FirmwareUi Unifi Dream Machine Pro FirmwareUi Unifi Dream Router 5G MaxUi Unifi Dream Machine Beast FirmwareUi Unifi Dream Machine Special EditionUi Unifi Dream Router 7Ui Unifi Cloud Gateway Max FirmwareUi Unifi Network Video RecorderUi Unifi Network Video Recorder ProUi Unifi Dream Router
Weakness Type
CWE-284, NVD-CWE-Other