Critical severity9.0NVD Advisory· Published Jul 2, 2026· Updated Jul 9, 2026

CVE-2026-55116

Description

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Affected products

UI/Unifi Connect
cpe:2.3:a:ui:unifi_connect:*:*:*:*:*:*:*:*
Range: <3.4.20
Ubiquiti Inc/Unifillm-fuzzy

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000