8.6
CVE-2026-54407
- EPSS 0.29%
- Veröffentlicht 02.07.2026 14:49:16
- Zuletzt bearbeitet 06.07.2026 19:32:10
- Quelle support@hackerone.com
- CVE-Watchlists
- Unerledigt
LoginA malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ui ≫ Unifi Protect Version < 7.1.83
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.29% | 0.209 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| support@hackerone.com | 8.6 | 3.9 | 4.7 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc