CVE-2026-55114 HIGH

CVE-2026-55114

Vendor Ubiquiti Inc

Product UniFi Network Application

Weakness CWE-284

Published July 2, 2026

Last update July 2, 2026

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

Key dates

02Disclosure timeline

July 2, 2026 CVE published

July 2, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-55114 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html

Related vulnerabilities

04Related CVE

CVE-2026-50280 Craft CMS: Authorization bypass in `entries/move-to-section` via missing target-section save check CVE-2026-55118 CVE-2026-46695 BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files CVE-2026-41856 Spring GraphQL Annotation Detection Vulnerability CVE-2026-45177 Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism