CVE-2026-55116

—

CVSS 3.1

9.8 critical

EPSS

<1%p35

Published

Jul 2, 2026 (Jul 2, 2026)

Modified

Jul 9, 2026

Description

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Vendors: ui
Products: unifi connect
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news3 stories

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

The Hacker NewsAug 4, 12:16 UTC · Aug 4, 2026Ransomware CVE-2026-50746 CVE-2026-50747 CVE-2026-50748+45 CVEs

Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation

Security AffairsJul 8, 20:21 UTC · Jul 8, 2026Vulnerability in the wildCVE-2026-50746 CVE-2026-50747 CVE-2026-50748+7 CVEs

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

The Hacker NewsJul 8, 14:38 UTC · Jul 8, 2026Vulnerability in the wildCVE-2026-50746 CVE-2026-50747 CVE-2026-50748+7 CVEs