VULNERABILITY INTELLIGENCE

CVE-2026-54407

CVSS score8.6 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2026-07-02
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.

Weakness classification

  • support@hackerone.com: CWE-284

Primary references