PT-2026-55236 · Ubiquiti · Unifi Access Application

Publicado 2026-07-02 · Atualizado 2026-07-02 · CVE-2026-54400

NVD

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-54400

Produtos afetados

Unifi Access Application

Referências · 4

• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-54400 · Nota de Segurança
• https://twitter.com/UpwindMDR/status/2072745700920557855 · Publicação no Twitter
• https://twitter.com/UpwindMDR/status/2072745850288087116 · Publicação no Twitter