PT-2026-55243 · Ubiquiti · Unifi Protect Application

Publicado 2026-07-02 · Atualizado 2026-07-02 · CVE-2026-54407

NVD

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-54407

Produtos afetados

Unifi Protect Application

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-54407 · Nota de Segurança
• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · Nota