High severity8.6NVD Advisory· Published Jul 2, 2026· Updated Jul 6, 2026

CVE-2026-54407

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.

Affected products

UI/Unifi Protect
cpe:2.3:a:ui:unifi_protect:*:*:*:*:*:*:*:*
Range: <7.1.83
Unify/Protect Applicationllm-create
UI/UniFi Protect Applicationllm-create

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000