PT-2026-55251 · Ubiquiti · Unifi Protect Application

Published

2026-07-02

·

Updated

2026-07-02

·

CVE-2026-55115

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-55115

Affected Products

Unifi Protect Application