PT-2026-55257 · Ubiquiti · Unifi Protect Application

Publicado 2026-07-02 · Atualizado 2026-07-02 · CVE-2026-56841

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-56841

Produtos afetados

Unifi Protect Application

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-56841 · Nota de Segurança
• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · Nota