Paper/Archive/CVE-2026-54400

CVE-2026-54400

Ubiquiti Inc UniFi Access Application — A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Ac…

EPSS 0.5%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 44.5.445 × 208.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

Affected

ProductAffectedFixed inSource

UniFi Access Application< 4.2.294.2.29CNA

Scores by source

hackerone (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc