CVE-2026-55116

9.8 criticalEPSS 0.4%

Critical (9.8) in ui unifi connect. EPSS 0.4% chance of exploitation in the next 30 days.

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2026-07-02
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

ui:unifi_connect

References

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Check your stack JSON