VULNERABILITY INTELLIGENCE

CVE-2026-54400

CVSS score9.1 CRITICAL
EPSS probability0.52%
CISA KEVNot currently listed
Published2026-07-02
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

Weakness classification

  • support@hackerone.com: CWE-284

Primary references