Critical severity9.9NVD Advisory· Published Jul 2, 2026· Updated Jul 7, 2026

CVE-2026-55115

Description

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

Affected products

UI/Unifi Protect
cpe:2.3:a:ui:unifi_protect:*:*:*:*:*:*:*:*
Range: <7.1.83
Unify/Protect Applicationllm-fuzzy
Ubiquiti Inc/UniFi Protect Applicationllm-fuzzy

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000