High severity7.5NVD Advisory· Published Jul 2, 2026· Updated Jul 10, 2026
CVE-2026-55112
CVE-2026-55112
Description
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
Affected products
20- cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
- cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:*Range: <=5.1.15
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.