CVE-2026-21633

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-21633", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2026-01-01T15:00:02.338Z", "datePublished": "2026-01-05T16:47:38.510Z", "dateUpdated": "2026-01-05T21:03:40.183Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nAffected Products:\r\n\r\nUniFi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nMitigation:\r\n\r\nUpdate your UniFi Protect Application to Version 6.2.72 or later."}], "affected": [{"defaultStatus": "unaffected", "vendor": "Ubiquiti Inc", "product": "UniFi Protect Application", "versions": [{"version": "6.1.79", "status": "affected", "lessThan": "6.2.72", "versionType": "semver"}]}], "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2026-01-05T16:47:38.510Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "CWE-287 Improper Authentication"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-05T21:03:35.276072Z", "id": "CVE-2026-21633", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-05T21:03:40.183Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21633", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-05T21:03:35.276072Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-05T21:03:30.008Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Ubiquiti Inc", "product": "UniFi Protect Application", "versions": [{"status": "affected", "version": "6.1.79", "lessThan": "6.2.72", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9"}], "descriptions": [{"lang": "en", "value": "A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nAffected Products:\r\n\r\nUniFi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nMitigation:\r\n\r\nUpdate your UniFi Protect Application to Version 6.2.72 or later."}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2026-01-05T16:47:38.510Z"}}}, "cveMetadata": {"cveId": "CVE-2026-21633", "state": "PUBLISHED", "dateUpdated": "2026-01-05T21:03:40.183Z", "dateReserved": "2026-01-01T15:00:02.338Z", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "datePublished": "2026-01-05T16:47:38.510Z", "assignerShortName": "hackerone"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "UniFi Protect Application", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "6.2.72", "status": "affected", "version": "6.1.79", "versionType": "semver"}]}], "source": "support@hackerone.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ui:unifi_protect:*:*:*:*:*:*:*:*", "matchCriteriaId": "F58979E4-F426-4E50-BF77-7A94200D0357", "versionEndExcluding": "6.2.72", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nAffected Products:\r\n\r\nUniFi Protect Application (Version 6.1.79 and earlier).\r\n\r\n \r\n\r\nMitigation:\r\n\r\nUpdate your UniFi Protect Application to Version 6.2.72 or later."}, {"lang": "es", "value": "Un actor malicioso con acceso a la red adyacente podr\u00eda obtener acceso no autorizado a una c\u00e1mara UniFi Protect explotando una vulnerabilidad del protocolo de descubrimiento en la aplicaci\u00f3n UniFi Protect (versi\u00f3n 6.1.79 y anteriores).\n\nProductos afectados:\nAplicaci\u00f3n UniFi Protect (versi\u00f3n 6.1.79 y anteriores).\n\nMitigaci\u00f3n:\nActualice su aplicaci\u00f3n UniFi Protect a la versi\u00f3n 6.2.72 o posterior."}], "id": "CVE-2026-21633", "lastModified": "2026-06-17T10:18:50.760", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "support@hackerone.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21633", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-05T21:03:35.276072Z", "version": "2.0.3"}}]}, "published": "2026-01-05T17:15:47.133", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T08:19:55.839030+00:00", "value": {"mitigation_remediation": ["Upgrade the UniFi Protect Application to version 6.2.72 or later.", "Segregate the UniFi Protect devices into a separate VLAN or apply firewall rules so that only trusted, authenticated devices can use the discovery protocol.", "Monitor network traffic for abnormal discovery requests and investigate suspicious activity."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized Device Access"}, "threat_synthesis": {"affected_systems": "Ubiquiti Inc's UniFi Protect Application, v6.1.79 or earlier.", "description_and_impact": "The vulnerability is a flaw in the discovery protocol of the UniFi Protect Application version 6.1.79 and earlier. An attacker who can reach the camera on the same or adjacent local network can send crafted discovery packets that bypass authentication, allowing the attacker to view camera streams or gain control of the camera device. This represents an authentication bypass weakness (CWE-287).", "risk_and_exploitability": "A CVSS score of 8.8 indicates high severity, while an EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to be on the camera\u2019s local network vicinity. Once reached, the attacker can access the camera\u2019s services without proper credentials, enabling privacy or operational compromise. The lack of external remote access conditions reduces the likelihood of widespread infection but still poses a serious risk to networks that allow local discovery traffic."}}}}, "created": "2026-01-06T14:17:18.061547+00:00", "title": "Unauthorized Camera Access via Discovery Protocol in UniFi Protect", "updated": "2026-04-18T08:30:35.825381+00:00", "vendors": ["ubiquiti", "ubiquiti$PRODUCT$protect_application"]}