CVE-2026-55112

Published Jul 2, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in Ubiquiti UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in Ubiquiti UniFi OS Protect
Type Values Removed Values Added
Title Improper Access Control in Ubiquiti UniFi OS Protect Allows Privilege Escalation
Type Values Removed Values Added
Title Improper Access Control in Ubiquiti UniFi OS Protect Allows Privilege Escalation
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in Ubiquiti UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in Ubiquiti UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi Protect
Type Values Removed Values Added
Title Improper Access Control in UniFi OS Protect Allows Privilege Escalation
Type Values Removed Values Added
Title Improper Access Control in UniFi OS Protect Allows Privilege Escalation
Type Values Removed Values Added
Title Privilege Escalation in UniFi OS Protect via Improper Access Control
Type Values Removed Values Added
Title Privilege Escalation in UniFi OS Protect via Improper Access Control
Type Values Removed Values Added
Title Improper Access Control in UniFi OS Protect Allows Privilege Escalation on Ubiquiti Devices
Type Values Removed Values Added
Title Improper Access Control in UniFi OS Protect Allows Privilege Escalation on Ubiquiti Devices
Type Values Removed Values Added
Title Privilege Escalation Vulnerability in UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation Vulnerability in UniFi OS Protect
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi OS Protect Application
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi OS Protect Application
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi Protect Application
Type Values Removed Values Added
Title Privilege Escalation via Improper Access Control in UniFi Protect Application
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
Weaknesses CWE-284
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ui Enterprise Network Video Recorder Enterprise Network Video Recorder Core Enterprise Network Video Recorder Core Firmware Enterprise Network Video Recorder Firmware Unifi Cloud Gateway Fiber Unifi Cloud Gateway Fiber Firmware Unifi Cloud Gateway Industrial Unifi Cloud Gateway Industrial Firmware Unifi Cloud Gateway Max Unifi Cloud Gateway Max Firmware Unifi Cloudkey Unifi Cloudkey Firmware Unifi Dream Machine Beast Unifi Dream Machine Beast Firmware Unifi Dream Machine Pro Unifi Dream Machine Pro Firmware Unifi Dream Machine Pro Max Unifi Dream Machine Pro Max Firmware Unifi Dream Machine Special Edition Unifi Dream Machine Special Edition Firmware Unifi Dream Router Unifi Dream Router 5g Max Unifi Dream Router 5g Max Firmware Unifi Dream Router 7 Unifi Dream Router 7 Firmware Unifi Dream Router Firmware Unifi Dream Wall Unifi Dream Wall Firmware Unifi Network Video Recorder Unifi Network Video Recorder Firmware Unifi Network Video Recorder G2 Unifi Network Video Recorder G2 Firmware Unifi Network Video Recorder G2 Pro Unifi Network Video Recorder G2 Pro Firmware Unifi Network Video Recorder Instant Unifi Network Video Recorder Instant Firmware Unifi Network Video Recorder Pro Unifi Network Video Recorder Pro Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
hackerone
Published
Updated
Jul 2, 2026, 3:51 PM
Reserved
Jun 16, 2026, 3:00 PM
Status
Analyzed
Published
Jul 2, 2026, 3:17 PM
Modified
Jul 10, 2026, 2:46 AM