CVE-2026-55116
9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Summary
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Ubiquiti Inc | Dream Machines | 0 < 5.1.19 | affected |
| Ubiquiti Inc | Enterprise Fortress Gateway | 0 < 5.1.19 | affected |
| Ubiquiti Inc | Dream Wall | 0 < 5.1.19 | affected |
| Ubiquiti Inc | Dream Routers | 0 < 5.1.19 | affected |
| Ubiquiti Inc | Express 7 | 0 < 5.1.19 | affected |
| Ubiquiti Inc | Cloud Gateways | 0 < 5.1.19 | affected |
| Ubiquiti Inc | Enterprise Firewall Core | 0 < 5.1.19 | affected |
Weaknesses
- CWE-284: CWE-284 Improper Access Control - Generic
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.