High severity7.5NVD Advisory· Published Jul 2, 2026· Updated Jul 9, 2026
CVE-2026-55110
CVE-2026-55110
Description
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
Affected products
32- cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_firewall_core_firmware:*:*:*:*:*:*:*:*Range: <=5.1.18
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.