High severity8.7NVD Advisory· Published Jul 2, 2026· Updated Jul 6, 2026

CVE-2026-54406

Description

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device.

Affected products

UI/Unifi Network Application
cpe:2.3:a:ui:unifi_network_application:*:*:*:*:*:*:*:*
Range: <10.4.57
Ubiquiti Inc/Unifi Network Applicationllm-fuzzy

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.565
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000