1. Home
  2. CVE Database
  3. CVE-2026-55112
HIGH · 7.5

CVE-2026-55112

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to ...

Vulnerability Description

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
UiUnifi Dream Machine Pro Firmware<= 5.1.15
UiUnifi Dream Machine Pro-
UiUnifi Dream Machine Special Edition Firmware<= 5.1.15
UiUnifi Dream Machine Special Edition-
UiUnifi Dream Machine Pro Max Firmware<= 5.1.15
UiUnifi Dream Machine Pro Max-
UiUnifi Dream Machine Beast Firmware<= 5.1.15
UiUnifi Dream Machine Beast-
UiUnifi Dream Router Firmware<= 5.1.15
UiUnifi Dream Router-
UiUnifi Dream Wall Firmware<= 5.1.15
UiUnifi Dream Wall-
UiUnifi Dream Router 7 Firmware<= 5.1.15
UiUnifi Dream Router 7-
UiUnifi Cloudkey Firmware<= 5.1.15
UiUnifi Cloudkey-
UiUnifi Network Video Recorder Firmware<= 5.1.15
UiUnifi Network Video Recorder-
UiUnifi Network Video Recorder Pro Firmware<= 5.1.15
UiUnifi Network Video Recorder Pro-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2026-55112?

CVE-2026-55112 is a vulnerability with a CVSS score of 7.5 (HIGH). A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to ...

How severe is CVE-2026-55112?

CVE-2026-55112 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-55112?

Check the references section above for vendor advisories and patch information. Affected products include: Ui Unifi Dream Machine Pro Firmware, Ui Unifi Dream Machine Pro, Ui Unifi Dream Machine Special Edition Firmware, Ui Unifi Dream Machine Special Edition, Ui Unifi Dream Machine Pro Max Firmware.