PT-2026-55244 · Ubiquiti · Unifi Protect Application

Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-54408

NVD

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-54408

Affected Products

Unifi Protect Application

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-54408 · Security Note
• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · Note