ZeroHour

CVE-2026-56841

CVSS 3.1
8.8 high
EPSS
<1%p41
Published
()
Modified
Description

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

Vendors
ui
Products
unifi protect
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.