Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-55110 Details
Description
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
A Cross-Origin Resource Sharing (CORS) misconfiguration in Ubiquiti UniFi OS could allow a malicious actor to exploit an authenticated user's session. By luring the user to a malicious page, the attacker could trigger actions within UniFi OS using the user's credentials.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 2, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
| CWE-942 | Permissive Cross-domain Policy with Untrusted Domains | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ui unifi os server | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine beast firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine beast | All versions |
CPE
Remediation
| |
| ui unifi dream machine pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine pro | All versions |
CPE
Remediation
| |
| ui unifi dream machine special edition firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine special edition | All versions |
CPE
Remediation
| |
| ui unifi dream machine pro max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine pro max | All versions |
CPE
Remediation
| |
| ui enterprise fortress gateway firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise fortress gateway | All versions |
CPE
Remediation
| |
| ui unifi dream router firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router | All versions |
CPE
Remediation
| |
| ui unifi dream wall firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream wall | All versions |
CPE
Remediation
| |
| ui unifi dream router 7 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router 7 | All versions |
CPE
Remediation
| |
| ui unifi express 7 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi express 7 | All versions |
CPE
Remediation
| |
| ui unifi cloudkey firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloudkey | All versions |
CPE
Remediation
| |
| ui unifi cloud key plus firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud key plus | All versions |
CPE
Remediation
| |
| ui unifi cloudkey enterprise firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloudkey enterprise | All versions |
CPE
Remediation
| |
| ui unifi network video recorder firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder | All versions |
CPE
Remediation
| |
| ui unifi network video recorder pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder pro | All versions |
CPE
Remediation
| |
| ui unifi network video recorder instant firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder instant | All versions |
CPE
Remediation
| |
| ui enterprise network video recorder firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise network video recorder | All versions |
CPE
Remediation
| |
| ui enterprise network video recorder core firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise network video recorder core | All versions |
CPE
Remediation
| |
| ui unifi network video recorder g2 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder g2 | All versions |
CPE
Remediation
| |
| ui unifi network video recorder g2 pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder g2 pro | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway ultra firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway ultra | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway max | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway industrial firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway industrial | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway fiber firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway fiber | All versions |
CPE
Remediation
| |
| ui unas 2 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas 2 | All versions |
CPE
Remediation
| |
| ui unas 4 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas 4 | All versions |
CPE
Remediation
| |
| ui unas pro firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas pro | All versions |
CPE
Remediation
| |
| ui unas pro 4 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas pro 4 | All versions |
CPE
Remediation
| |
| ui unas pro 8 firmware | <= 5.1.16 |
CPE
Remediation
| |
| ui unas pro 8 | All versions |
CPE
Remediation
| |
| ui enterprise firewall core firmware | <= 5.1.18 |
CPE
Remediation
| |
| ui enterprise firewall core | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 9, 2026 | Initial Analysis | [email protected] |
| Jul 2, 2026 | CVE Modified | CISA-ADP |
| Jul 2, 2026 | New CVE Received | [email protected] |