NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2026-55115

CVSS 3.1: 9.9 critical
EPSS: <1%p39
Published: Jul 2, 2026 · Jul 2, 2026
Modified: Oct 25, 2026

Analyze CVE-2026-55115 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

Vendors: ui

Products: unifi protect

Weakness: CWE-918

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

3 stories

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

The Hacker NewsAug 4, 12:16 UTC · Aug 4, 2026RansomwareCVE-2026-50746 CVE-2026-50747 CVE-2026-50748+452 · 1 read

60

Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation

Security AffairsJul 8, 20:21 UTC · Jul 8, 2026VulnerabilityExploitedCVE-2026-50746 CVE-2026-50747 CVE-2026-50748+72 · 1 read

60

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

The Hacker NewsJul 8, 14:38 UTC · Jul 8, 2026VulnerabilityExploitedCVE-2026-50746 CVE-2026-50747 CVE-2026-50748+72

60