VULNERABILITY INTELLIGENCE

CVE-2026-56842

CVSS score7.5 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-07-02
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

Weakness classification

  • support@hackerone.com: CWE-863

Primary references