PT-2026-55258 · Ubiquiti · Unifi Network Application

Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-56842

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-56842

Affected Products

Unifi Network Application

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-56842 · Security Note
• https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · Note