PT-2026-55236 · Ubiquiti · Unifi Access Application

Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-54400

NVD

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-54400

Affected Products

Unifi Access Application

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-54400 · Security Note
• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · Note
• https://twitter.com/UpwindMDR/status/2072745700920557855 · Twitter Post
• https://twitter.com/UpwindMDR/status/2072745850288087116 · Twitter Post