Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-55112 Details
Description
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
A vulnerability allowing improper access control has been identified in UniFi OS versions prior to the latest release, specifically within the UniFi Protect application. This vulnerability could be exploited by a malicious actor with low privileges and network access, under certain conditions, to escalate privileges on the host device.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 2, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
| CWE-284 | Improper Access Control | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ui unifi dream machine pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine pro | All versions |
CPE
Remediation
| |
| ui unifi dream machine special edition firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine special edition | All versions |
CPE
Remediation
| |
| ui unifi dream machine pro max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine pro max | All versions |
CPE
Remediation
| |
| ui unifi dream machine beast firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream machine beast | All versions |
CPE
Remediation
| |
| ui unifi dream router firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router | All versions |
CPE
Remediation
| |
| ui unifi dream wall firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream wall | All versions |
CPE
Remediation
| |
| ui unifi dream router 7 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router 7 | All versions |
CPE
Remediation
| |
| ui unifi cloudkey firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloudkey | All versions |
CPE
Remediation
| |
| ui unifi network video recorder firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder | All versions |
CPE
Remediation
| |
| ui unifi network video recorder pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder pro | All versions |
CPE
Remediation
| |
| ui unifi network video recorder instant firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder instant | All versions |
CPE
Remediation
| |
| ui enterprise network video recorder firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise network video recorder | All versions |
CPE
Remediation
| |
| ui enterprise network video recorder core firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui enterprise network video recorder core | All versions |
CPE
Remediation
| |
| ui unifi network video recorder g2 firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder g2 | All versions |
CPE
Remediation
| |
| ui unifi network video recorder g2 pro firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi network video recorder g2 pro | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway max | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway industrial firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway industrial | All versions |
CPE
Remediation
| |
| ui unifi cloud gateway fiber firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi cloud gateway fiber | All versions |
CPE
Remediation
| |
| ui unifi dream router 5g max firmware | <= 5.1.15 |
CPE
Remediation
| |
| ui unifi dream router 5g max | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | Initial Analysis | [email protected] |
| Jul 2, 2026 | CVE Modified | CISA-ADP |
| Jul 2, 2026 | New CVE Received | [email protected] |