PT-2026-55243 · Ubiquiti · Unifi Protect Application

Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-54407

NVD

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-54407

Affected Products

Unifi Protect Application

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-54407 · Security Note
• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · Note