Каталог CVE

CVE-2026-55114

A malicious actor with access to the network and low…

[Каталог CVE]

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

Критичність
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedunifi_network_application10.4.57UnknownSource applicability is not establishedProvider not reported
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedunifi_network_application10.4.57UnknownSource applicability is not establishedProvider not reported
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "unifi_network_application",
      "fixed_version": "10.4.57",
      "applicability_unknown": true
    },
    {
      "name": "unifi_network_application",
      "ranges": [
        {
          "fixed": "10.4.57",
          "introduced": "",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55114",
      "fixed_version": "10.4.57",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-55114",
      "provider_updated_at": "2026-10-25T21:10:00.770"
    }
  ]
}

OpenFactory catalog packages

Зіставлення пакетів триває.

Спостережено:

Посилання

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]