CVE-2026-55116

critical · 9

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

CVSS

0.4%

EPSS (exploit prob.)

35th

EPSS percentile

2026-07-02

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-284

Affected products

Vendor	Product	Affected versions
ui	unifi_connect	< 3.4.20

Check a specific version with /api/v1/cve/match.

References

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-55116